On Friday, August 17, 2012 6:51:51 PM UTC-5, Jorge Villalobos wrote: > > > I agree with others in this thread that intentional violations should > > blocked right away. Specifically, I think this includes add-ons that try to > > circumvent, tamper or alter our install dialogs. I think we should call > > that out as a "must not" rule. > > > > That is the first policy on the list. > >
Of course. I totally missed that. > > > > > > > > > There is one more thing I'd like to suggest here. I think we should take a > > leadership position on behalf of all internet users and say that add-ons > > "should not" be bundled on an opt-out basis. That practice is such a > > problem - not only for us but other browser makers too. To me it feels like > > the kind of thing that an organization that promises "We answer to no one > > buy you" would do. Of course simply stating that doesn't mean software > > makers will just change their behavior but we have a good history of being > > able to promote ideas that are good for the web and getting people and > > companies to get on board. > > > > > > > I don't know about that. In the case of AV vendors, I can see how > > browser add-ons are a critical piece in the protection package, given > > that the browser is one of the most frequent attack vectors. It can be > > considered a core feature, and as such I think it makes sense for it to > > be part of the recommended install. > > > > Moreover, if we have our opt-in screen and we're already requiring them > > to use it, asking them for a double opt-in seems unreasonable to me. > Fair enough. Maybe this can be a "should not" thing with some guidelines? For example, out-out bundling of McAffee with a Flash update is not core functionality. Neither is the Ask Toolbar critical to the installation of Trillian. Those are the kinds of things I'm particularly concerned about. I was at my mother's house last night and she has Chrome installed but no idea how it got there (they've done a number of opt-out bundles). _______________________________________________ governance mailing list [email protected] https://lists.mozilla.org/listinfo/governance
