Re: Helping ensure privacy + security

> We could make that per-site UI easier. Bug 1186948 would make per-site 
> enumeration opt-in easier by hiding click-to-play ("Ask to Activate") 
> plugins from websites enumerating navigator.plugins until the user 
> clicks the click-to-play button.

If the plugin was hidden on pageload, prior to click-to-play, is it possible many sites would still break in the same way?

Also, to take a step back, I have some questions about the 'plugins.enumerable_names' feature. For the 2,199+ people who were using my plugin, which prevented plugin & mimetype enumeration entirely by setting the value to "", do you think their decision to accept poorly written JavaScript to break, as it does, was valid? Do you think they should be able to make that decision, assuming they might value their privacy over the functionality of some websites?