Re: Helping ensure privacy + security

On 10/24/15 1:27 AM, Chris Antaki wrote:
> Thanks for sharing your knowledge, Chris. I really like your suggestion to disable all plugins by default. As an added bonus, it also works in Chrome.

I really like that idea. The best UI is no UI: your add-on could disable 
all plugins by default, but instead of including UI to maintain a plugin 
whitelist, the add-on could include its own curated whitelist of which 
plugins should be allowed on which websites. For example:

* Silverlight could be disabled by default but whitelisted to be allowed 
on netflix.com and amazon.com (and some of the other video-on-demand 
sites that use Silverlight).

* QuickTime could be disabled by default but whitelisted to be allowed 
on for apple.com (where it is used for movie trailers and product demos).

Flash is so ubiquitous, you would probably need to allow it everywhere.

To expand the add-on's plugin/website whitelist, users could send you 
lists of plugin websites they use. Or the whitelist could be maintained 
on GitHub so users can submit pull requests to update list more easily.


chris