Hacker News new | ask | show | jobs
by londons_explore 1849 days ago
Google could make tooling for extension authors which identifies permissions which have not been used and suggests removing them.

Then the process of developing an extension could be:. (1) request all permissions. (2) write code for extension. (3) run extension in test session and exercise all functionality. (4) let tool suggest the correct set of required permissions, which can be very granular.

This means the developers don't need to know the precise details of each of hundreds of permissions.