Loqimblaney: voxpelli left you a message 3 hours, 26 minutes ago: An indie-config iframe can have a whitelist of pages it wants to send the config to and have some kind of mechanism for prompting the user to add a site to that whitelist, so the privacy implication should be possible to handle
