2 ms·
It must be so frustrating working in open source and seeing such entitled comment such as yours. Malware extensions is a real problem that affects literally mi
by Jonnax 7y ago
It must be so frustrating working in open source and seeing such entitled comment such as yours.
Malware extensions is a real problem that affects literally millions more people than people who want to use the standard Firefox release with an unsigned extension.
And it's such a lazy thing to say "oh they can just replace the Firefox binary" when that's clearly a significantly more complex task than just writing an extension.
What's so secret about your extension code that you want to be able to distribute it to users without getting it reviewed by Mozilla?
You posted on that Bugzilla post but gave no details as to what your use case is.
Also why can't a user take the code for your extension, create an account on the add-on marketplace and privately get it signed for themselves. It's a multistep process but works.
- dessant 7y agoI gave more details about my use case here: https://github.com/jeremiahlee/page-translator/issues/26#issuecomment-545170847 https://github.com/jeremiahlee/page-translator/issues/26#iss... Though its worth noting that we do not need reasons to expect our privacy being respected. And this issue is not just about me and my needs, but about user liberties, so please refrain from making it personal. > Also why can't a user take the code for your extension, create an account on the add-on marketplace and privately get it signed for themselves. It's a multistep process but works. No, it does not work, as the maintainer of Page Translator can attest. https://github.com/jeremiahlee/page-translator/issues/26 https://github.com/jeremiahlee/page-translator/issues/26 This change is hostile to users and concentrates power in the hands of the browser vendor. Consider that they are making third-party extension stores impossible.
- Vinnl 7y ago> No, it does not work, as the maintainer of Page Translator can attest. > > https://github.com/jeremiahlee/page-translator/issues/26 https://github.com/jeremiahlee/page-translator/issues/26 Ouch. I'm generally in favour of having add-ons signed, but I do have an extension that injects an external script into the browser and web pages - for a completely non-nefarious use case. I do understand the security risk and why they'd block it, but I'm not looking forward to the day my extension is no longer flying under the radar and gets pulled. Edit: Of note is that the Chrome web-store does allow my extension, but requires a multi-week review every time I upload a new version. Somehow they're fine with the remote code, even though it could change after their review.
- dessant 7y agoChrome even allows installing local extensions that persist between browser restarts, after changing an option.