Re:Update Regarding Add-Ons in Firefox
by lol768 on Saturday May 04, 2019 @12:30PM
(#19827438)
Out of interest, what's special about this add-on that allows it to install intermediate certificates like this vs. an add-on that any random dev could write?
[ Parent
| on HN ]
In the manifest it has a special "experiment_apis":
"experiment_apis": {
"skeleton": {
"schema": "experiments/skeleton/schema.json",
"parent": {
"scopes": [
"addon_parent"
],
"script": "experiments/skeleton/api.js",
"paths": [
[
"experiments",
"skeleton"
]
]
}
}
}
Only Mozilla can use these on release versions of Firefox. If you want some more details then try here: https://firefox-source-docs.mozilla.org/toolkit/components/e...
Re:Update Regarding Add-Ons in Firefox
by denibertovic on Monday May 06, 2019 @09:12AM
(#19839077)
Also how can I verify that intermediate certificate? Is that a base64 encoded string?
Re:Update Regarding Add-Ons in Firefox
by denibertovic on Monday May 06, 2019 @09:11AM
(#19839065)
Where does it say specifically on that page you linked that only Mozilla can use these apis?
Re:Update Regarding Add-Ons in Firefox
by AsyncAwait on Saturday May 04, 2019 @12:34PM
(#19827477)
It's installed as a study addon, only Mozilla could install these.
> It's installed as a study addon, only Mozilla could install these.
And that gives it access to use `Cc`/Components.classes?
Re:Update Regarding Add-Ons in Firefox
by AsyncAwait on Saturday May 04, 2019 @01:21PM
(#19827817)
Not familiar with the specifics, just know that Mozilla uses this mechanism to sometimes ship experimental features to a select group of Firefox users that have it enabled and they used it today to issue this hotfix to anyone who has field studies enabled.