bug-gnuzilla
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Bug-gnuzilla] Firefox add-on signature verification failure


From: Vipul
Subject: Re: [Bug-gnuzilla] Firefox add-on signature verification failure
Date: Fri, 17 May 2019 03:16:21 +0000


Hey there,

Recent, Firefox incident of add-on signature verification failure disables most of the add-ons and failing to install add-on in Firefox as well as in Tor browser . But, IceCat browser wasn't affected by this incident. I was wondering , why IceCat browser was not affected by this incident?

Is it because of "xpinstall.signatures.required"[1] is set to false? If yes, why does this value is set to false although add-on signature verification is an important security feature?

[1]: https://git.savannah.gnu.org/cgit/gnuzilla.git/tree/data/settings.js#n338

cheers,
Vipul

Attachment: signature.asc
Description: OpenPGP digital signature


reply via email to

[Prev in Thread] Current Thread [Next in Thread]