Explain permission required in readme

[Gitoffthelawn]

Hi! Thank you for the excellent extension.

It looks like it performs a simple, but essential, function.

Can you update the readme (or just answer below), why it needs each of its permissions?

The current required permissions are:

1. Access your data for all websites
2. Access browser tabs
3. Access browser activity during navigation

And if it's possible to reduce/remove any permissions, that would be great.

Thanks!

[Rob--W]

1. To redirect http to https, the extension needs the permission to see all requests. It is used at:
   

   https-by-default/firefox/background.js

   Line 175 in 8498f6a

   urls: ['http://*/*'],

2. To detect repeated attempts to open http-URLs (e.g. because the site does not support https), the extension needs to see the URL of the current tab. It is used at:
   

   https-by-default/firefox/background.js

   Lines 141 to 145 in 8498f6a

   	if (currentTab && isDerivedURL(currentTab.url, requestedUrl)) {
   	// User had likely edited the current URL and pressed Enter.
   	// Do not rewrite the request to HTTPS.
   	return;
   	}

3. This was used to detect the current tab's URL. It is no longer used since the removal of the webNavigation call at c8c5b02
   I'm still preserving the permission in case it is needed again to improve the detection of http:-requests.

The most "scary" permission is 1, but that cannot be removed as it is necessary for the extension to function reliably.

[Gitoffthelawn]

Thanks so much!

Regarding the "Access your data for all websites" permission: If I'm understanding you correctly, an extension needs that permission just to see what url the browser is requesting. Is that correct? I was hoping there was a way around that.

BTW, the information you provided is very useful. Would you like to add it to the readme, or would you like me to do that? Or would you prefer neither?

[Rob--W]

Neither. I think that my reply in this issue is sufficient. There are not that many issues in this repo, so anyone who is interested would easily find the question and answer here.