I think all key signer extensions for browsers like Nos2x, Nos2x-fox and Alby require more permissions than they should. Right now they require at least “access your data for all websites” which I feel should be changed.
The extension could allow the user to add list of Nostr web client domain names to a whitelist on the extension settings and only allow access to data for those added domains.
A great example of this is the extension Sponsorblock. If you install it, it will only access data for the YouTube domain and YouTube nocookie domains. On the options page it allows us to specify more domains to allow it to access and only accesses those.
Created GitHub feature requests for this for further discussion
https://github.com/diegogurpegui/nos2x-fox/issues/2
https://github.com/fiatjaf/nos2x/issues/22
https://github.com/getAlby/lightning-browser-extension/issues/1999
