> Hey there,
> 

> Recent, Firefox incident of add-on signature verification failure disables 
> most of the add-ons and failing to install add-on in Firefox as well as in 
> Tor browser . But, IceCat browser wasn't affected by this incident. I was 
> wondering , why IceCat browser was not affected by this incident?

Is it because of "xpinstall.signatures.required"[1] is set to false? If yes, 
why does this value is set to false although add-on signature verification is 
an important security feature?

[1]: https://git.savannah.gnu.org/cgit/gnuzilla.git/tree/data/settings.js#n338

cheers,
Vipul

Attachment: signature.asc
Description: OpenPGP digital signature

--
http://gnuzilla.gnu.org

Reply via email to