Re-Consider the Extensions Selection:
The extensions we recommend aren't even present by default in Tor Browser anymore, and the Tor Browser rationales for using them are largely gone too. Re-considering which extensions we use isn't something we should do very often, because people who don't update will have very different fingerprints from those who do. However, now is a good time to do it because the JPackage+Firefox Profile Bundle is now able to automatically update itself.
In order to choose extensions they need to be:
- Relevant to a specific privacy-related change to a web browser
- Maintained and available from a reputable source
- Be available under an open-source license
and they must not:
- Place information which is unique to the browser or to the user(unique information) into browser.storage
- Inject unique information into web pages
- Allow remote sites to access local resources from within the WebExtension. Exceptions can be made for caching-related needs if and only if there is a clear way to for an "owner" of the cached content corresponding to an Origin to be the sole agent capable of reading the cache.
related issues: #1 (closed) #3 (closed) #4 (closed) #7 (closed)