The only issue with this otherwise great idea is that “the developer says, that…”. A browser API should have a way to only grant certain rights when this is technically disclosed, e.g. an extension can only access location data if this is (formally) declared, and must be able to cope without it if the user or any global policy disallows it.
The only issue with this otherwise great idea is that “the developer says, that…”. A browser API should have a way to only grant certain rights when this is technically disclosed, e.g. an extension can only access location data if this is (formally) declared, and must be able to cope without it if the user or any global policy disallows it.
Already exists. And you’re basically spreading misinformation.
https://support.mozilla.org/en-US/kb/permission-request-messages-firefox-extensions#w_access-your-location
So what does this new change do then? Is it just about disclosing the state to the user?