I would like the following included in the settlement agreement between Facebook and the FTC: 1) PRIVACY BY DEFAULT No more sharing of information without your users’ express agreement (OPT-IN). Whenever you add a new feature to share additional information about your users, you should not assume that they want this feature turned on. 2) VETTED APP DEVELOPERS It is far too easy to become a developer on Facebook. With over one million app developers already registered on the Facebook platform, it is hardly surprising that your service is riddled with rogue applications and viral scams. Only vetted and approved third-party developers should be allowed to publish apps on your platform. 3) HTTPS FOR EVERYTHING We welcome you recently introducing an HTTPS option, but you left it turned off by default. Worse, you only commit to provide a secure connection “whenever possible”. Facebook should enforce a secure connection all the time, by default. Without this protection, your users are at risk of losing personal information to hackers. 4) STOP ALLOWING DOWNLOADS OF FACEBOOK USERS PHOTOS AND VIDEOS BY ANYONE WHO CAN VIEW THEM. MAKE THIS A "PERMISSION ONLY" OPTION THE SAME AS TAGS CURRENTLY WORK.