Alas, Firefox doesn't allow changing any keybindings without modifying the source code. The bugzilla ticket about this is already 2 decades old.

Isn't it already game over if malware can write into your hostfile? At least on Windows you need some elevated access for it, which means such malware could just read/write the target program's memory directly instead of resorting to clunky MitM.

navigator.clipboard.read()/write() has been enabled (see documentation). A paste context menu will appear for the user to confirm when attempting to read clipboard content that is not originated from a same-origin page.

Very nice. The old execCommand API was annoying.

I've found that the easiest way to live debug userChrome.css is to:

1. Open the browser toolbox,
2. Go to the style editor tab,
3. Write userChrome in the search box to find it,
4. Write CSS directly into the browser toolbox integrated editor.

The integrated editor reloads CSS changes as you write, even without saving.

Been using it for a couple of months now at work. It's good.

I also appreciate how intuitively it works. I wasn't aware of this feature when it first landed in developer edition, but after I accidentally created a group with drag and drop, the feature just clicked.

MV2 extensions should work in Thunderbird without modification. I've made a couple of simple extensions that work like a charm in both Firefox and Thunderbird, but I'm not sure if more complex extensions would have issues. The documentation says thus:

Some information listed on MDN may not apply to Thunderbird and some API methods may not be supported. Each API page should include a compatibility chart and if that includes support for Firefox, it should work in Thunderbird as well.

Some MV3 extensions will not work in Thunderbird. See this page for list of missing functionality.

Thanks, going to try this at work. So far I had used tab group names for short comments, but it's not great in those cases where I have a group of tabs for one topic and want to remember that one tab has open todos and another is waiting for a blocker etc.

Yeah, I also found out when I was manually testing our product's logged-out UX at work and the 2nd trial started logged in.