4 ms·
> If I want to be able to continue this process, I will need to sign the extension myself This seems like a good approach to me. Instead of Mozilla itself sign
by cpeterso 11y ago
> If I want to be able to continue this process, I will need to sign the extension myself
This seems like a good approach to me. Instead of Mozilla itself signing developers' extensions, why can't Mozilla issue certificates so developers can sign their own extensions locally? If a developer turns rogue, Mozilla can revoke their certificate.
- gerv 11y agoBecause bad guys can just keep getting new certs when their old ones are revoked, unless you do identity validation (which costs money as it requires actual humans, so the certs can't be cheap or free).
- schrodinger 11y agoReviewing plugins costs somewhere around the same amount of human time/money, no?
- malka 11y agoIf their review are as thorough as Android app's one, they cost about nothing.
- reubenmorais 11y agoAdd-on reviews are done largely by volunteers.
- soapdog 11y agothe addons signage is an automated process.