Overclock.net - An Overclocking Community - View Single Post - [Engadget] Firefox disabled all add-ons because a certificate expired (updated)
View Single Post
post #19 of (permalink) Old 05-05-2019, 12:40 PM
New to Overclock.net
Imouto's Avatar
Join Date: Mar 2012
Posts: 2,181
Rep: 234 (Unique: 110)
Quote: Originally Posted by JackCY View Post
Then enlighten us all.
Mozilla signs the add-ons. You can spoof the site all you want and however you download wouldn't work anyway. That is precisely why they sign them.

Quote: Originally Posted by JackCY View Post
Because as it's painfully obvious to many now, it does not work
And if someone is determined enough they can get it signed even if contents are malicious, one way or another.
You would need the private key held by Mozilla or hijack the browser distribution. Which is quite different than the walk in the park you presented as how easy it would be to distribute counterfeit add-ons.

Quote: Originally Posted by JackCY View Post
How many other browsers bother with enforcing signed addons only? On top of that how many fail to update their certificate and extend it's valid date?
Oh, please. Deflecting already? I never denied Mozilla screwed it up royally here. It is you who's wrong about the certificates.

Now that this is out of the way I wouldn't use your method because you obviously have no idea about what you're talking.

Imouto is offline