Access your data for all websites - including passwords
PROBLEM: When trying to install meta-press-es, Firefox warns me that if I install it, then Access your data for all websites will be enabled (with no opt-out mentioned) for meta-press-es; this allows the extension to "read the content of any web page you visit as well as data you enter into those web pages, such as usernames and passwords." Since I see no reason why meta-press-es should read any usernames or password I use on web pages that I visit generically, I, and presumably any other security-conscious user, refuse to install meta-press-es.
CONTEXT:
-
Firefox Quantum 68.2.0esr (64-bit)
-
meta-press-es version:
-
Firefox description of "Access your data for all websites" https://support.mozilla.org/en-US/kb/permission-request-messages-firefox-extensions?as=u&utm_source=inproduct#w_access-your-data-for-all-websites
DISCUSSION:
Is the problem that meta-press-es asks for too much permissions?
Is an audit of the meta-press-es code sufficient to show that it will not abuse the privileges it is given this way? If yes, how many netizens will do this audit themselves or trust someone else to have done that audit?
PROPOSAL:
Provide an opt-in access to data per website, with an easy user interface to select news-type websites that s/he does not log in to with usernames and passwords, rather than an obligatory "all website" access permission. This would frighten away less potential users.