Re: Chrome browser insecurity

On Fri, August 23, 2013 12:15, David Nicol wrote:
> So what would a POLA-compliant web browser do differently? Is Konqueror
> close?

For starters, it could allow for dropping privileges in a non futile way:

http://developer.chrome.com/extensions/permissions.html#remove

"After a permission has been removed, calling permissions.request()
usually adds the permission back without prompting the user."

Ideally a plugin architecture could handle intentionally malicious
plugins, but the very least it should do is allowing a benign but not
brilliantly securely written plugin to effectively drop privileges.