That's as maybe but in an Enterprise environment the requirement to sign source code through an unreliable third party is ridiculous. (Unreliable in the sense that at any point they can refuse to sign your code that is only ever intended for private use anyway.)
For organizations that do have valid code signing certificates themselves and are using ESR, signing with that certificate should be made possible, and problem solved. Such add-ons would only work in the ESR edition, so the change wouldn't affect the average user. Peter LS -----Original Message----- From: Enterprise [mailto:[email protected]] On Behalf Of Wolf, Daniel Sent: 25 January 2016 16:01 To: Tanstaafl; [email protected] Subject: Re: [Mozilla Enterprise] Add-on Signing in ESR There is no purpose to user control if it's used to infect people's browsers with malicious extensions that Mozilla have no central ability to inspect. People in the enterprise may not understand how fundamentally Firefox is being screwed up for 99% of users by Mozilla's current lack of control. This is why I tell people to use Chrome every chance I get. Daniel Wolf -----Original Message----- From: Enterprise [mailto:[email protected]] On Behalf Of Tanstaafl Sent: Saturday, January 23, 2016 11:42 AM To: [email protected] Subject: Re: [Mozilla Enterprise] Add-on Signing in ESR On 1/23/2016 12:35 PM, Tanstaafl <[email protected]> wrote: > Thanks Kev... > > While this is a step in the right direction, this is indeed great news > for those running the ESR version. But it doesn't help people like me > who prefer the latest stable. I will still be relegated to running an > unbranded version just so I can maintain full control of my browser > experience. > > Why is Mozilla *eliminating* user control? I thought that is what > Mozilla was all about? I still have not seen even one, single rational > argument for removing the pref to disable this. Not to mention no rational argument debunking Dan Stillman's proof of concept Addon demonstrating how trivial it is to get a malicious Addon through the automated approval process, thereby proving that all this does is deny users control of their own browser experience in pursuit of a *false* sense of security. https://urldefense.proofpoint.com/v2/url?u=http-3A__danstillman.com_2015_11_23_firefox-2Dextension-2Dscanning-2Dis-2Dsecurity-2Dtheater&d=AwICAg&c=4ZIZThykDLcoWk-GVjSLm9hvvvzvGv0FLoWSRuCSs5Q&r=lYg_tLHKXy-7QDawG0H6XfYunDJx6IkQFx7IQ_8kzbgCV0SZUlpENde5QxxVxBxn&m=NdDVb2-eVcOSixSQLOvKypVXHAd2qdMX8Qt2qr3WTT4&s=f5ngfdxRiDxt4Ohj1whwa8UK_lMmmaxNRLddp86PBI4&e= _______________________________________________ Enterprise mailing list [email protected] https://urldefense.proofpoint.com/v2/url?u=https-3A__mail.mozilla.org_listinfo_enterprise&d=AwICAg&c=4ZIZThykDLcoWk-GVjSLm9hvvvzvGv0FLoWSRuCSs5Q&r=lYg_tLHKXy-7QDawG0H6XfYunDJx6IkQFx7IQ_8kzbgCV0SZUlpENde5QxxVxBxn&m=NdDVb2-eVcOSixSQLOvKypVXHAd2qdMX8Qt2qr3WTT4&s=6MXasFXA9YMHmzi455sR2IBOTTje_7LSd_G21NGlsmo&e= To unsubscribe from this list, please visit https://urldefense.proofpoint.com/v2/url?u=https-3A__mail.mozilla.org_listinfo_enterprise&d=AwICAg&c=4ZIZThykDLcoWk-GVjSLm9hvvvzvGv0FLoWSRuCSs5Q&r=lYg_tLHKXy-7QDawG0H6XfYunDJx6IkQFx7IQ_8kzbgCV0SZUlpENde5QxxVxBxn&m=NdDVb2-eVcOSixSQLOvKypVXHAd2qdMX8Qt2qr3WTT4&s=6MXasFXA9YMHmzi455sR2IBOTTje_7LSd_G21NGlsmo&e= or send an email to [email protected] with a subject of "unsubscribe" _______________________________________________ Enterprise mailing list [email protected] https://urldefense.proofpoint.com/v2/url?u=https-3A__mail.mozilla.org_listinfo_enterprise&d=AwICAg&c=4ZIZThykDLcoWk-GVjSLm9hvvvzvGv0FLoWSRuCSs5Q&r=lYg_tLHKXy-7QDawG0H6XfYunDJx6IkQFx7IQ_8kzbgCV0SZUlpENde5QxxVxBxn&m=NdDVb2-eVcOSixSQLOvKypVXHAd2qdMX8Qt2qr3WTT4&s=6MXasFXA9YMHmzi455sR2IBOTTje_7LSd_G21NGlsmo&e= To unsubscribe from this list, please visit https://urldefense.proofpoint.com/v2/url?u=https-3A__mail.mozilla.org_listinfo_enterprise&d=AwICAg&c=4ZIZThykDLcoWk-GVjSLm9hvvvzvGv0FLoWSRuCSs5Q&r=lYg_tLHKXy-7QDawG0H6XfYunDJx6IkQFx7IQ_8kzbgCV0SZUlpENde5QxxVxBxn&m=NdDVb2-eVcOSixSQLOvKypVXHAd2qdMX8Qt2qr3WTT4&s=6MXasFXA9YMHmzi455sR2IBOTTje_7LSd_G21NGlsmo&e= or send an email to [email protected] with a subject of "unsubscribe" _______________________________________________ Enterprise mailing list [email protected] https://mail.mozilla.org/listinfo/enterprise To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise or send an email to [email protected] with a subject of "unsubscribe"
