3 ms·
It's completely absurd that an open source project has taken it upon themselves to mandate extension signing. It's as if Debian declared that you couldn't insta
by GunboatDiplomat 11y ago
It's completely absurd that an open source project has taken it upon themselves to mandate extension signing. It's as if Debian declared that you couldn't install packages which weren't signed by them, but don't worry, you can always recompile Debian yourself with that feature turned off.
- akkartik 11y agoSeriously. I have a private extension that I wrote and gave up on getting reviewed because the process is painful, and now I can't run it on Firefox. They've successfully pushed me to the less stable nightly release. It's only a matter of time before some bug gets me off Firefox entirely, and it's back to the bad old pre-firefox days.
- zanny 11y agoI have no problem with a Linux distro doing this. Though I'd consider several to already be doing this - any distro you cannot click to install through a GUI a package archive with I'd call blocking casual users from installing non-official software. Though most distros (I know at least Ubuntu / Suse enable this) let you just click package archives to install them.
- kbrosnan 11y agoHow does one protect the majority of users in the wide open case? For example see https://bugzilla.mozilla.org/show_bug.cgi?id=1251911 https://bugzilla.mozilla.org/show_bug.cgi?id=1251911 where the extension downloaded another extension and disabled the signing pref.
- GunboatDiplomat 11y agoYou don't. It's not the browsers job. Users need to educate themselves, and they won't unless there are consequences for ignorance.