All extensions disabled due to expiration of intermediate signing cert

#1

Post by xvector » Sat, May 04, 2019, 1:31 AM UTC

All extensions disabled due to expiration of intermediate signing cert
bugzilla.mozilla.org

Re: All extensions disabled due to expiration of intermediate signing cert

#2

Post by xvector » Sat, May 04, 2019, 1:34 AM UTC

Looks like all extensions have been disabled for all Firefox users.

I think this fail-closed behavior is more of a security issue than the one it is trying to solve. All of my security add-ons - Privacy Badger, NoScript, Decentraleyes, and many more were disabled. Even worse, it happened without notice to the user.

One moment I was browsing the internet (just barely) secured by these add-ons, and the next moment, all of them disappeared (without warning) and I only noticed when I saw my password manager was missing.

Re: All extensions disabled due to expiration of intermediate signing cert

#3

Post by MrEldritch » Sat, May 04, 2019, 1:35 AM UTC

As a temporary fix, go to about:debugging, and click "load temporary addon", then paste in the download link of the missing add-on. Then just try and not restart Firefox until they fix the broken cert.

Re: All extensions disabled due to expiration of intermediate signing cert

#4

Post by MrEldritch » Sat, May 04, 2019, 1:38 AM UTC

This is a goddamned disaster. I'm just thankful that I use an offline password manager, but even still ...

I like FF, don't get me wrong, but this is going to absolutely fucking destroy user trust in Mozilla. This kind of incompetence, on a browser scale, is breathtaking.

Re: All extensions disabled due to expiration of intermediate signing cert

#5

Post by vatueil » Sat, May 04, 2019, 1:41 AM UTC

Active discussion here: https://news.ycombinator.com/item?id=19823465

Re: All extensions disabled due to expiration of intermediate signing cert

#6

Post by xvector » Sat, May 04, 2019, 1:43 AM UTC

vatueil wrote: post #5

Active discussion here: https://news.ycombinator.com/item?id=19823465

Thanks, missed this thread.

Re: All extensions disabled due to expiration of intermediate signing cert

#7

Post by dontbenebby » Sat, May 04, 2019, 1:43 AM UTC

MrEldritch wrote: post #4

This is a goddamned disaster. I'm just thankful that I use an offline password manager, but even still ... I like FF, don't get me wrong, but this is going to absolutely fucking destroy user trust in Mozilla. This kind of incompetence, on a browser scale , is breathtaking.

>This is a goddamned disaster. I'm just thankful that I use an offline password manager

I'm not sure this cert is used with the PW manager?

Re: All extensions disabled due to expiration of intermediate signing cert

#8

Post by [deleted] » Sat, May 04, 2019, 1:45 AM UTC

MrEldritch wrote: post #3

As a temporary fix, go to about:debugging, and click "load temporary addon", then paste in the download link of the missing add-on. Then just try and not restart Firefox until they fix the broken cert.

[deleted]

Re: All extensions disabled due to expiration of intermediate signing cert

#9

Post by [deleted] » Sat, May 04, 2019, 1:48 AM UTC

[deleted]

Re: All extensions disabled due to expiration of intermediate signing cert

#10

Post by Deimorz » Sat, May 04, 2019, 1:53 AM UTC

vatueil wrote: post #5

Active discussion here: https://news.ycombinator.com/item?id=19823465

Even though that's active and has more votes, it's ranked very low (#39 as of right now, and this post is now #1 on the site).

I think HN penalizes non-link posts (or people are flagging it because they think it's just someone asking for tech support).