I understand this will absolutely break all the websites, and that buy-in from others is required, but I think it's long overdue that Firefox gives the user a permission system that is complete. Treat every single API which exposes any amount of information about my device the same as "powerful features" (Not literally, "powerful features" should have warnings, and most other APIs shouldn't). If I set my browser to the strictest setting, websites should require my consent to read my clipboard, or keyboard, or even my cursor position and screen size. These things should be toggle-able one by one, hidden somewhere near or inside the lock. Most users will leave it on default, but very very many users will be shocked to find out what you're currently giving websites and would rather have the option not to. The current situation requires users to play whack-a-mole by installing add-ons or reduce compatibility further than my proposition by using NoScript. Instead every single API should be built to provide default and broadly compatible example data, and the user should be able to see what the site is trying to do, and then allow that functionality. If a website asks for my time-zone, while temporarily displaying times in UTC on the page, this isn't suspicious, and I'd be glad that Firefox loved me enough to ask for my consent before sharing it. If done consistently and with a friendly UI, a complete shift to user-control would be welcomed and appreciated by non-privacy conscious users, non-techy users, and privacy conscious techy users alike.
... View more