With its expiration, Google\u2019s web store will purge all V2 extensions\u2014including the major ad and tracking blockers. Furthermore, Chrome will no longer run extensions that are not V3 compliant, even those installed with Let\u2019s start with the positives. Manifest V3 can protect users from potentially malicious extensions. Most developers would likely agree that blocking the execution of remotely hosted code<\/a> and arbitrary strings<\/a> is an overall win from a privacy and security standpoint.<\/p>\n Unfortunately, many of the other changes involve tradeoffs that may result in worse experiences for users and extension developers. Perhaps the most contentious change is the removal of Moving forward, Chrome browser extensions implementing request blocking functionality will be forced to use For context, EasyList<\/a> alone includes enough rules to hit this limit. But the most effective wide-spectrum content blockers\u2014such as uBlock Origin<\/a>\u2014require many more domain lists and rulesets to ensure their effectiveness.<\/p>\n The ugly truth is that this may cause more problems than it solves. A requirement to submit all extension code for review with V3 can arguably better protect users from malicious extensions. But this only applies if V3-compliant extensions are submitted through Google\u2019s official store.<\/p>\n In practice, those who are determined to subvert advertisements and third-party trackers endemic to many modern web applications typically toggle on developer mode to load up external extensions. But these extensions may be from less-than-reputable sources. And they have the potential to harbor malicious or otherwise insecure code as they avoid Google\u2019s review process. This is, to some extent, a problem that already exists with V2. But the accessibility of fully functional open-source blockers such as uBlock Origin and Ghostery<\/a> currently mitigates it.<\/p>\n V3 may exacerbate this issue, especially if the impacts to the functionality of these tools are as extensive as expected. Relying on unvetted sources can expose enterprises to a host of security threats.<\/p>\n If you want to keep ad-blocking and anti-tracking functionality, why not simply switch browsers?<\/p>\n In short, many people probably will, but the long story is a bit more nuanced. Switching to another browser may prove to be an effective solution for personal use. But this approach is not necessarily trivial in the context of enterprises, which manage browsers organizationally. Chrome has enjoyed the largest market share of any web browser<\/a> since it took the top spot in 2012. As a result of this success, it has become entrenched in many enterprises.<\/p>\n Even if your organization chooses to shift away from Chrome, V3 will likely impact other browsers\u2019 design choices to maintain compatibility. Currently, Edge<\/a> and Safari<\/a> have confirmed support for V3. Firefox<\/a>, Brave<\/a>, and Vivaldi<\/a> will additionally maintain support for V2-style blocking requests in some capacity.<\/p>\n But even outside of switching browsers, all hope is not yet lost.<\/p>\n You can manage and block a substantial amount of ad and third-party tracking traffic at the DNS level. However, this can come at the cost of granularity. For example, it is more straightforward to enact a policy blocking all of youtube.com than it is to target only YouTube\u2019s ads with blocking policies. This especially true in instances where the ad and video share a common source. However, this can be problematic. Categorically blocking a domain may, depending on the situation, be undesirable for the organization, end users, or both.<\/p>\n Overall, if they can handle the complexities effectively, creating consistent, centralized policies to manage network traffic at the organizational level can be a boon to enterprises.<\/p>\n Indeed, you can configure a domain list in Edge as a dynamic feed to synchronize with a hosted domain list file. This feature can filter out ad and tracking traffic according to popular lists like EasyList and Peter Lowe\u2019s Blocklist<\/a>. Or it can filter using a custom solution that your organization curates.<\/p>\n Did you know that BlueCat Edge<\/a> can help your enterprise to block undesired traffic at the DNS level?<\/p>\n Edge dynamic feeds are not the tool for managing ad traffic at the DNS level. Solutions like Pi-hole<\/a> can be wonderful for personal use.<\/p>\n But nothing else measures up to the robust functionality that Edge delivers. Purpose-built and battle-tested, Edge can scale to fit the needs of your enterprise. Give dynamic feeds a try, especially if you are already an Edge subscriber. We would love to hear about your experience with it!<\/p>\n Contact your BlueCat customer support manager or account executive or visit BlueCat Support<\/a> today to learn how you can set up dynamic feeds in Edge.<\/em><\/p>\n BlueCat Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":" Google claims that the newest version of its Chrome extension<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[94],"tags":[95],"class_list":["post-1261","post","type-post","status-publish","format-standard","hentry","category-blog","tag-blog"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Blue Cat","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/bluecat\/"},"category_info":"Blog<\/a>","tag_info":"Blog","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/1261","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=1261"}],"version-history":[{"count":1,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/1261\/revisions"}],"predecessor-version":[{"id":1379,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/1261\/revisions\/1379"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=1261"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=1261"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=1261"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}ExtensionInstallForcelist<\/code>. Certainly, Google could change their plans for V3 during this review process. But assuming they don\u2019t, enterprises using Chrome browsers must confront some hard facts about the security and privacy of their networks.<\/p>\nWhat Manifest V3 could mean for anti-tracking and ad blocking<\/h2>\n
webRequest<\/code> API calls<\/a> aimed at blocking HTTP requests. Substantial impacts are expected to the functionality of anti-tracking and ad-blocking extensions by limiting their ability to inspect and modify requests.<\/p>\nA 30,000-rule limit<\/h3>\n
declarativeNetRequest<\/code> instead of the current webRequest<\/code> present in Manifest V2. This is problematic because there is a 30,000-rule limit for declarativeNetRequest<\/code><\/a>. Meanwhile, there is no such limit to blocking requests using V2\u2019s webRequest<\/code>.<\/p>\nCausing more problems than it solves<\/h3>\n
To avoid Manifest v3, why not just switch browsers?<\/h2>\n
Block undesired traffic using DNS policy instead<\/h2>\n
![\"Screenshot](\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/06\/manifest-v3-doubts-try-a-dns-based-solution-8.jpg\")
<\/p>\n