3 ms·
I'm not putting words in your mouth, you literally said this is a "Good Thing (tm)", because of hypothetical security reasons. Whereas I'm literally saying that
by overgard 8y ago
I'm not putting words in your mouth, you literally said this is a "Good Thing (tm)", because of hypothetical security reasons. Whereas I'm literally saying that this actually broke real privacy extensions, broke peoples software, and badly damaged their reputation.
As to your argument about security: doing the check on install instead of all the time, as I suggest is preferable, still protects against MITM and malware. The only argument for expiring software based on a calendar is that it might be a security risk if it's out of date. But first off, that is highly dependent on what the extension actually does. Also clearly we can see it's also a security risk to turn off privacy extensions without warning based on an arbitrary signing certificate.
- Fnoord 8y agoThings might change after install. Its a Good Thing (tm) to periodically recheck, or check revocations. > > I'm not putting words in your mouth [..] Yes, you did: > "So you think [..]"
- overgard 8y ago> Yes, you did: >> "So you think [..]" Um, I ended that sentence with a question mark. Implying a question. But you conveniently left that out of your quote, so amusingly now you're putting words in my mouth. (Although who cares? I don't!) Maybe I should have phrased it "So do you think" but it would have essentially been the same sentence and typing on my ipad is annoying. I was asking you if you thought this was a good thing for Mozilla. Which you dodged to turn this into a debate about proper etiquette instead of answering the question directly. It was a leading question, sure, but I was making a point.
- Fnoord 8y agoWhat about the first part I wrote? Do you find CRL a useful feature in CAs/WoTs?