News for hackers. Stuff that matters.

A comment on All extensions disabled due to expiration of intermediate signing cert. Parent comment

Re:All extensions disabled due to expiration of intermediate... by hyeonwho4 on Saturday May 04, 2019 @08:27AM (#19826006)
Setting preferences really should not be shocking, given that they have the capacity to run automatic updates. I'm more surprised that they can push code without certificates.
[ Parent | on HN ]
Re:All extensions disabled due to expiration of intermediate... by Piskvorrr on Saturday May 04, 2019 @12:17PM (#19827358)
The expires certificate seems to be in a chain concerning extensions. Not necessarily the same chain concerning core browser updates...
[ Parent | on HN ]
Re:All extensions disabled due to expiration of intermediate... by vesinisa on Saturday May 04, 2019 @10:27AM (#19826649)
> I'm more surprised that they can push code without certificates.

Where are you getting this from? AFAIK all Mozilla code / prefs they can push should be signed -- this very issue seems to stem from the cert used to sign AMO extensions expired.

[ Parent | on HN ]