[rovr138]

> 1) Every extension has to declare up front what urls it needs to communicate to.

I believe Firefox has this. The rest are great ideas. Would love to see a way to log these.

[gambler]

The explanation of what each permission really does and why they are necessary are traditionally horrible, so even I, having developed a plugin once, have no clue what is reasonable and what is not.

[tracker1]

Like realizing that the "flashlight app" needs camera permissions because the light is tethered to the camera permission.