Or is HTTPS / LetsEncrypt too big to fail? HTTPS still always a good choice? I see…
All extensions disabled due to expiration of intermediate signing cert
51–60 of 955 posts
Re: All extensions disabled due to expiration of intermediate signing cert
#52This is a goddamned disaster. I'm just thankful that I use an offline password manager, but even still ... I like FF, don't get me wrong, but this is going to absolutely fucking destroy user trust in Mozilla. This kind of incompetence, on a browser scale , is breathtaking.
I think we'll all live. No need for the chicken little act.
Re: All extensions disabled due to expiration of intermediate signing cert
#53I’ll still keep using Firefox since I recognize the importance of browser diversity and the hazards of a Chrome monoculture (that and vertical tabs), but, yikes. Still, this type of oversight seems all too common even in large companies. I remember several cases from Fortune 500 companies in the past few years alone. What would be a good way to automate checking for them? Has anyone developed a tool designed specific…
Talking about vertical tabs, I was in the middle of studying for an upcoming exam, then when I alt-tabbed back into Firefox, all of my tabs are missing with that unsupported addon error. Fortunately refreshing Firefox gave me back normal tabs, at a cost of uninstalling all of my addons. The problem is that Tree Style Tabs relies on userchrome.css edit to hide the tab bar, and when TST is forcibly removed there is no…
https://github.com/eoger/tabcenter-redux/wiki/Custom-CSS-Twe...
#toolbar-menubar[inactive="true"] + #TabsToolbar {
visibility: collapse !important;
}Re: All extensions disabled due to expiration of intermediate signing cert
#54This is why users need to be in control of their own computers. Why can't I tell my copy of Firefox to ignore the certificate? Why can't I sign my own extensions? Mistakes happen, it's okay. But users should be empowered to work around them.
> Why can't I tell my copy of Firefox to ignore the certificate? Why can't I sign my own extensions? The issue is that if you leave any sort of lever that reduces security, it will be abused by bad actors. This is why browsers are having ever decreasing ways to bypass security and have full access. It is annoying, but at the end of the day, protecting 99.999% of the users trumps what us power users want.
It is horribly paternalistic to advocate for keeping users ignorant, unlearning, and --- dare I say it --- easily manipulated.
I will refrain from mentioning again that infamous Franklin quote. I am frankly very fucking pissed off by this authoritarian walled-garden trend, and vehemently oppose anyone who helps this industry put the nooses around the necks of others as well as their own.
Re: All extensions disabled due to expiration of intermediate signing cert
#55For a piece of open source software you really have very little control with firefox. It really sucks that the alternatives are worse.
This, likely for almost all of their users, creates more of a security problem than signature checking actually solves. For me noscript no longer works which is (IMO) a critically important extension (between mozilla taking away the disable javascript button and spector.)
Re: All extensions disabled due to expiration of intermediate signing cert
#56My extensions are still running. I even restarted Firefox a few moments ago. So it’s not everyone?
Re: All extensions disabled due to expiration of intermediate signing cert
#57Re: All extensions disabled due to expiration of intermediate signing cert
#58I’ll still keep using Firefox since I recognize the importance of browser diversity and the hazards of a Chrome monoculture (that and vertical tabs), but, yikes. Still, this type of oversight seems all too common even in large companies. I remember several cases from Fortune 500 companies in the past few years alone. What would be a good way to automate checking for them? Has anyone developed a tool designed specific…
That's a great question. I've never seen a bulletproof solution for organizational tasks that need to be done yearly. If someone's in charge... and both they and their manager happen to leave in the same year... and whatever system they had in place to remember (probably their personal calendars) is gone... and the manager's manager has 1,000 other things to remember... ...how does an organization ensure the task sti…
With something almost stupidly simple and low-tech: checklists.
(I'm reading "The Checklist Manifesto" right now, and the points it makes seem to fit perfectly with everything you mention.)
Re: All extensions disabled due to expiration of intermediate signing cert
#59Can someone explain exactly what went wrong? I don't think I quite understand, but 7/9 of my extensions have been disabled.