4 ms·
As an alternative perspective, I'm totally fine with FF disabling the extensions when the cert went invalid, and I'm also happy that it auto-updated itself to f
by trashface 7y ago
As an alternative perspective, I'm totally fine with FF disabling the extensions when the cert went invalid, and I'm also happy that it auto-updated itself to fix the issue. To me the optics are pretty good: a mistake happened and they were able to recover pretty fast, and my browser wasn't exploited by bad actors in the meantime.
- lugg 7y ago> a mistake happened and they were able to recover pretty fast, and my browser wasn't exploited by bad actors in the meantime. To me adding a new plugin signing cert through a side loaded plugin is pretty much the definition of exploited. All this tells me is that their plugin signing solution is utterly worthless. The only way this should have been fixed was through official update channels.