Extensions are a great way to increase the capabilities of your web browser, but they can also be the source of problems. Malicious extensions can be a serious headache, and this is something that Chrome users know more than most. Now Google is looking to improve security.
Extensions are a great way to increase the capabilities of your web browser, but they can also be the source of problems. Malicious extensions can be a serious headache, and this is something that Chrome users know more than most. Now Google is looking to improve security.
The company has already promised that with Chrome 70 it is going to give users more privacy controls, and today it announced that this version of the browser will also introduce permission controls extensions. On top of this Google is introducing a new review process for extensions submitted to the Chrome Web Store, as well as placing a ban on extensions with obfuscated code.
See also:
In all, Google has announced five changes that it believes will help to improve the security and trustworthiness of Chrome extensions. With Chrome 70, users will be able to choose between restricting extension host access to a custom list of sites, or configuring extensions to require a click to gain access to the current page. Google explains why:
A new review process — it is hoped — will help weed out more malicious extensions, and a new requirement for all extension code to be readable means it will not be possible for extensions to have hidden capabilities. Google says that over 70 percent of malicious and policy-violating extensions that are blocked from the Chrome Web Store contain obfuscated code, so this change could have quite an impact.
Google is also looking further into the future. Starting in 2019, enrollment in 2-Step Verification will be required for Chrome Web Store developer accounts to help improve security for users. Also arriving next year is the next extensions manifest version, Manifest v3, which Google says has the following goals:
Image credit: Ink Drop / Shutterstock
