<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><blockquote type="cite"><div bgcolor="#FFFFFF" text="#000000">What we'd like to happen is that the entire site (not just the page)
gets to run the plugin. Actually, for the one plugin case, my
message goes something like: "Allow <a href="http://gaming.com">gaming.com</a> to run "Unity player"
", which removes ambiguity. I think for the multiple plugin case, I
added the "on the page" clause so that the user wouldn't allow
random plugins to run. But perhaps saying something like: "Allow
<a href="http://gaming.com">gaming.com</a> to run these plugins:" is understandable enough.<br></div></blockquote><div><br></div><div>Yeah, it's a balance — doing it domain-wide (which is probably the best solution from a technical perspective) is probably not a good match for user expectations of "page". Ay, the web!</div><br><blockquote type="cite"><div bgcolor="#FFFFFF" text="#000000">
One thing that you didn't bring up that I'm trying to figure out:
What is the behavior when the user unchecks all of the plugins? <br>
In my wireframes, I said that the action buttons would both be
greyed out. But what triggers the change in the plugins' state then?
If it's by clicking out of the doorhanger, how to we distinguish
that action from an intent to keep the settings as is? Can we do it
so that once the user unchecks the plugin it is immediately blocked?
Or does that break the paradigm?<br>
<br>
This is one behavior I'd like help thinking about :)<br></div></blockquote><div><br></div><div>*dons ideation hat*</div><div><br></div><div>Dynamically switch the labels of the buttons to "Don't allow" | "Never allow"? We really have three sets of doors in this theater: the fire exit (don't make any changes), or "I want these ones turned on [now|always]" or "I don't want any turned on [now|always]".</div><div><br></div><div>The trouble then is what to show when no plugins are checked on first entering the dialog, because the negative phrasing doesn't really work when you start on a positive footing.</div><div><br></div><div>Probably the only way out of that is to switch the language to be neutral: "Just once" | "Every time", and allow the rest of the dialog to frame the results of clicking the buttons rather than fleeing from the dialog. Not sure how you feel about passive button names…</div><br><blockquote type="cite"><div bgcolor="#FFFFFF" text="#000000">
<blockquote cite="mid:5240A640-2BE7-49C9-A76F-7CF06C7E1EE4@mozilla.com" type="cite">
<div>
<div>• For insecure plugins, should we perhaps change the
wording to be something like "Add a security exception",
rather than "Trust site"? Not only is this deliberately
discouraging, which I think is good here, but it also avoids
the cognitive blurring of <i>well, this site is insecure, but
Firefox is going to 'trust' it…</i>.</div>
<div><br>
</div>
</div>
</blockquote>
I like the reasoning, but I have to think of a shorter phrase than
"Add a security exception". "Add Exception" maybe?<br>
<br>
Just to give you context: this action allows the plugin to run long
term, but it doesn't permanently allow it. We're going to put in
place some expiration rules (i.e. if you don't visit the site for 90
days, the plugin is blocked once more). This is why I couldn't use
"Always" and had to go with something more abstract.<br></div></blockquote><div><br></div><div>Oh, awesome. Yeah, that makes sense. Perhaps another alternative for the toolbox is "Allow once" | "Remember my choice"? Nice and friendly, but not explicitly about trust…</div><br><blockquote type="cite"><div bgcolor="#FFFFFF" text="#000000">I'm advocating for the plugin icon to always remain in the Address
Bar so that the user can change their setting at any point in time.
It complicates the UI a little bit, but I think it's important to
allow the user to change their mind.<br></div></blockquote><br></div><div>There'll be a space now that we're getting rid of the bookmark star :D</div></body></html>