3 ms·
It's a trade off between security for normies and power for technical users. I disagreed at the time (as an addon author) yet have come around to agreeing with
by paulryanrogers 2y ago
It's a trade off between security for normies and power for technical users. I disagreed at the time (as an addon author) yet have come around to agreeing with the choice.
- smsm42 2y agoNormies don't know what the "addon" is and likely would have IT to install them anyway.
- lmz 2y agoIt's not IT. It's the "potentially unwanted software" installers they download. There's no way to distinguish a user installing an unsigned addon vs some malware doing so.
- smsm42 2y agoIf you're already running an unverified third-party installer, your system is gone. There's nothing Firefox addon signing can do to save you at that moment. You are already at the "running arbitrary code" stage.