require fewer permissions

YahooArchive / end-to-end

Use OpenPGP-based encryption in Yahoo mail.

http://yahoo.tumblr.com/post/113708033335/user-focused-security-end-to-end-encryption

Apache License 2.0

223 stars 40 forks source link

require fewer permissions #77

Closed maditya closed 8 years ago

maditya commented 8 years ago

Currently due to the "tabs" permission, user gets a warning saying the extension has access to browsing history. Does chrome allow more granular permissions so the extension can open a new tab, but not have access to browsing history?

happyfuncode commented 8 years ago

Capturing @adon-at-work 's comments:

'For facebook key lookup, instead of asking during install-time, we can ask users for such a permission during runtime, i.e., when user actually clicks "FB key import". (using optional permission: https://developer.chrome.com/extensions/permissions#manifest)'

'For "tabs" permission, I believe we can safely remove it without breaking anything.' - will need to test. Any thoughts, @diracdeltas ?