diff --git a/4.1-Extensions.md b/4.1-Extensions.md
index 6ae4ac0..b036079 100644
--- a/4.1-Extensions.md
+++ b/4.1-Extensions.md
@@ -17,11 +17,11 @@ These are all, where applicable, best configured to `deny-all` and whitelist.
 * [Decentraleyes](https://addons.mozilla.org/firefox/addon/decentraleyes/) <sup>✔ [Privacy](https://addons.mozilla.org/firefox/addon/decentraleyes/privacy/)</sup> | [GitHub](https://github.com/Synzvato/decentraleyes)
 * [HTTPS Everywhere](https://addons.mozilla.org/firefox/addon/https-everywhere/) <sup>✔ [Privacy](https://www.eff.org/code/privacy/policy)</sup> | [GitHub](https://github.com/EFForg/https-everywhere)
 * [Smart Referer](https://addons.mozilla.org/firefox/addon/smart-referer/) | [GitHub](https://github.com/meh/smart-referer)
+* [Header Editor](https://addons.mozilla.org/firefox/addon/header-editor/) | [GitHub](https://github.com/FirefoxBar/HeaderEditor)
 * [Neat URL](https://addons.mozilla.org/firefox/addon/neat-url/) <sup>✔ [Privacy](https://addons.mozilla.org/firefox/addon/neat-url/privacy/)</sup> | [GitHub](https://github.com/Smile4ever/firefoxaddons)
 * [Skip Redirect](https://addons.mozilla.org/firefox/addon/skip-redirect/) | [GitHub](https://github.com/sblask/webextension-skip-redirect)
 * [Violentmonkey](https://addons.mozilla.org/firefox/addon/violentmonkey/) | [GitHub](https://github.com/violentmonkey/violentmonkey)
   * Allows you to run [User Scripts](https://github.com/ghacksuserjs/ghacks-user.js/wiki/3.1-User-Scripts) which can do neat things
-* [Greasemonkey](https://addons.mozilla.org/firefox/addon/greasemonkey/) <sup>✔ [Privacy](https://addons.mozilla.org/firefox/addon/greasemonkey/privacy/)</sup> | [GitHub](https://github.com/greasemonkey/greasemonkey)
 * [Request Control](https://addons.mozilla.org/firefox/addon/requestcontrol/) | [GitHub](https://github.com/tumpio/requestcontrol)
    * Examples of [Filter Rules](https://github.com/ghacksuserjs/ghacks-user.js/wiki/3.5-Request-Control)
 * [Redirector](https://addons.mozilla.org/firefox/addon/redirector/) <sup>✔ [Privacy](https://github.com/einaregilsson/Redirector/blob/master/privacy.md)</sup> | [GitHub](https://github.com/einaregilsson/Redirector)
@@ -32,7 +32,9 @@ These are all, where applicable, best configured to `deny-all` and whitelist.
 ### :small_orange_diamond: Recommended Legacy Extensions
 
 * :green_heart: [NoScript 5.1.7](https://addons.mozilla.org/firefox/addon/noscript/versions/?page=1#version-5.1.7) <sup>✔ [Privacy](https://addons.mozilla.org/firefox/addon/noscript/privacy/)</sup>
-   * Yes, there is a FF57+ non-legacy version, but it's pretty much **utter crap** right now. Use uMatrix in some hardened configuration, but note that this is not a total replacement for NoScript, as NoScript can offer some unique protections; eg: ClearClick, ABE - as of writing these are not yet in the NS10 version)
+   * Yes, there is a FF57+ non-legacy version, but it's not ready for prime time. Use uMatrix in some hardened configuration, but note that this is not a total replacement for NoScript, as NoScript can offer some unique protections; eg: ClearClick, ABE - as of writing these are not yet in the NS10 version)
+* :green_heart: [Greasemonkey](https://addons.mozilla.org/firefox/addon/greasemonkey/versions/3.17) <sup>✔ [Privacy](https://addons.mozilla.org/firefox/addon/greasemonkey/privacy/)</sup> | [GitHub](https://github.com/greasemonkey/greasemonkey)
+   * Yes, there is a FF57+ non-legacy version, but it is not ready for prime time
 * :purple_heart: [HTTPS by default](https://addons.mozilla.org/firefox/addon/https-by-default/) | [GitHub](https://github.com/Rob--W/https-by-default) | [Extension Info](https://github.com/Rob--W/https-by-default/issues/12) & [1370388](https://bugzilla.mozilla.org/show_bug.cgi?id=1370388)
   * changes the behavior for schemeless URLs typed in the location bar
 * :purple_heart: [QuickJava](https://addons.mozilla.org/firefox/addon/quickjava/) | [GitHub](https://github.com/ThatOneGuyDotNet/QuickJava) | [Extension Info](https://github.com/ThatOneGuyDotNet/QuickJava/issues/44)