Extensions on AMO should display the verified domain or email associated with the developer account

[haftandilian]

Show a verified domain, email address, or email domain for addons posted on https://addons.mozilla.org/ to make it easier for users to confirm that an extension is from the identity/organization/company it lists.

As an example, with the addon for Firefox iCloud password integration, it is difficult for users to have confidence this addon is from Apple. At present, the addon review process implicitly must be careful that an addon advertised as from company A is from an email address we know is from company A or is verified to be from company A in some way. Showing the verified domain or email address (caveats below) would add transparency to that effort and give users more confidence to install addons. A verified domain would be preferable for entities/companies like the Apple example. For individual developers without a domain, an option for the developer to show the email address might help with transparency.

Caveats:

• Showing the verified email address or domain would add transparency to the auditing/review task. It could be 1) opt-in so that individuals not wishing to display an email address on AMO would not have to OR 2) limited to the domain of the verified email address so as not to show the complete address.
• There is some risk of confusion with email accounts. For example, @Icloud.com email addresses are freely available and some might confuse an @Icloud.com email address as conveying the account holder has an association with Apple.

VSCode example:

With the Microsoft VSCode extension library, some extensions are reported as having a verified domain. For example, hovering over the blue checkmark on the LLVM clangd extension page displays a popup message "LLVM has verified ownership for the domain llvm.org".

[Jon]

Thanks for submitting an idea to the Mozilla Connect community! Your idea is now open to votes (aka kudos) and comments.