1Password for Snap Firefox

Firefox Snap has supported Native Messaging via xdg-desktop-portal since November 2022. Over three years later, 1Password still does not work with it because 1Password-BrowserSupport does not accept xdg-desktop-portal as a caller — it validates the calling executable against a hardcoded list and requires the binary and its parent directory to be owned by root.

The result: on Ubuntu 22.04+ and any other distro shipping Firefox as a Snap (which is the default on Ubuntu, the most widely used desktop Linux distribution), the extension shows "Integration status: Connection problem" and cannot talk to the desktop app. The official workaround from 1Password support is to uninstall Snap Firefox and install the Mozilla .deb. That is not a fix — it is offloading the problem onto every Linux user.

I understand the original reasoning: restricting callers prevents arbitrary processes from initiating native messaging. But xdg-desktop-portal has its own permission model that requires explicit user consent to access the WebExtension backend. That is a legitimate, sandbox-aware trust path — the same mechanism other password managers and browser-integrating apps are expected to support going forward as Linux desktops move toward sandboxed application delivery.

Concrete ask: add xdg-desktop-portal as a supported caller of 1Password-BrowserSupport, gated behind the portal's existing consent prompt. Or, if there is a specific security concern with that approach, please publish what it is so the community can discuss it.

Environment where I am hitting this:

• OS: Kubuntu 26.04 LTS, KDE Plasma 6.6.4
• Firefox: Snap, version: 150.0.3 (64-bit)
• 1Password for Linux 8.12.12 (81212044)
• 1Password extension: 8.12.4.46