FS#50308 - [firefox] Disable extension signature requirement

Attached to Project: Arch Linux
Opened by Steven (Stebalien) - Sunday, 07 August 2016, 21:44 GMT
Last edited by Doug Newgard (Scimmia) - Sunday, 07 August 2016, 21:49 GMT
Task Type Feature Request
Category Packages: Extra
Status Closed
Assigned To No-one
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Please revert the hard extension signing requirement (but leave the about:config xpinstall.signatures.required option on by default).

It,
1. Makes it impossible to develop extensions on non-developer versions of Firefox (the developer version is not available in the repos).
2. Primarily exists to prevent Windows applications from disabling `xpinstall.signatures.required` and then side-loading a malicious extension.
3. Makes my blood boil. I use Arch because I don't like software telling me what I can and cannot do.

Arch users can already trivially break/compromise their systems if they do something stupid so this feature doesn't actually add any useful security.

I would normally just add Firefox to my list of applications to recompile myself. Unfortunately, it takes a very long time, a lot of scratch space, and a lot of memory to compile (I've never actually successfully compiled Firefox on my laptop due to these issues).
This task depends upon

Closed by  Doug Newgard (Scimmia)
Sunday, 07 August 2016, 21:49 GMT
Reason for closing:  Duplicate
Additional comments about closing:   FS#45900 

Loading...