The Great Suspender Chrome extension was officially banned today. Does anyone work on a policy of blocking all extensions?

Yea I was hoping it would turn out better but oh well. This is a pre malware fork https://chrome.google.com/webstore/detail/the-marvellous-suspender/noogafoofpebimajpfpamcfhoaifemoa

Been using a forked version of TGS that was created to remove the tracking. https://github.com/aciidic/thegreatsuspender-notrack

@colinmccarthy We considered doing an extension allowlist, but it’s frankly a lot of work to get to that point. the easiest thing to do would be to just allow all currently installed extensions and then set it up to block new ones going forward. We tend to block malicious extensions that we find, but haven’t moved towards the allowlist model yet.

We use API Whitelisting in Google

On that note: which permissions do you block?

extension approval workflows are coming.

https://www.youtube.com/watch?v=5zXBgDDP-OM

i can test it and see if it breaks any extensions that i use haha

@colinmccarthy all schools/districts work like that, all over the world. Block all, allow few.

@colinmccarthy I use this script to quickly see what apps & auth scopes of my users. Admin console provides the same info but I haven't figured out where I can get the same report https://github.com/slackhq/gsuite-oauth-third-party-app-report

thanks for sharing the script