User:Polvi/PFS2

Major Idea

Make plug-ins follow the same model as addons.

Three tiers

1. Plug-ins (effectively) bundled with Firefox since they are trusted
   1. very easy for the user to install in the UI
   2. 1 click
   3. ex: flash, pdf, java
2. Plug-ins tested/recommended/approved by Mozilla
   1. educates user about what they are doing
   2. ~3 clicks
   3. ex: silverlight, google gadgets, mathML
3. Random plug-ins
   1. make sure user knows they are getting something potentially malicious
   2. ~10 clicks
   3. ex: videoegg

Policy

Currently there is no clear policy about what plug-ins can get into PFS. We need to define this based on the three tiers methodology.

Phase one: clean it up

Right now PFS has all sorts of plug-ins, some better than others. For an initial PFS revamp, we need to accomplish the following things.

1. Ensure technical security through-out the site
   1. All communications over SSL
2. Define policy for how plug-ins get added to PFS
3. Re-organize plug-ins to match policy
   1. Probably meaning a lot of the current ones get the boot

Considerations

• What happens in ie7, opera, safari?