earthlng

you can use `browser.privacy.websites.firstPartyIsolate.get({})` to detect if isolation is enabled. see https://developer.mozilla.org/en-US/Add-ons/WebExtensions/API/privacy/websites

some bugzilla tickets * browser.aboutwelcome.templateMR Bug [1774063](https://bugzilla.mozilla.org/show_bug.cgi?id=1774063) - Added a 'browser.aboutwelcome.templateMR' pref to support MR 2022 onboarding * browser.contentblocking.features.strict Bug [1776760](https://bugzilla.mozilla.org/show_bug.cgi?id=1776760) - Enable dFPI by default for Beta and Release...

Holy shit I didn't think my opinion of CF could get any worse. To me, reading https://www.cloudflare.com/ssl/dedicated-certificates/, it sounds like customers of that service hand over the issuing of certs...

If you ever manage to detect this scam in your addon fork, I think a good default option would be to just completely block such domains for shameless deceptive behavior.

> a good default **option**