News for hackers. Stuff that matters.
Re:Update Regarding Add-Ons in Firefox by overgard on Saturday May 04, 2019 @01:59PM (#19828061)
I'm not putting words in your mouth, you literally said this is a "Good Thing (tm)", because of hypothetical security reasons. Whereas I'm literally saying that this actually broke real privacy extensions, broke peoples software, and badly damaged their reputation.

As to your argument about security: doing the check on install instead of all the time, as I suggest is preferable, still protects against MITM and malware. The only argument for expiring software based on a calendar is that it might be a security risk if it's out of date. But first off, that is highly dependent on what the extension actually does. Also clearly we can see it's also a security risk to turn off privacy extensions without warning based on an arbitrary signing certificate.

Re:Update Regarding Add-Ons in Firefox by Fnoord on Saturday May 04, 2019 @02:08PM (#19828133)
Things might change after install. Its a Good Thing (tm) to periodically recheck, or check revocations.

> > I'm not putting words in your mouth [..]

Yes, you did:

> "So you think [..]"

[dead]
Re:Update Regarding Add-Ons in Firefox by Fnoord on Saturday May 04, 2019 @03:37PM (#19828746)
What about the first part I wrote? Do you find CRL a useful feature in CAs/WoTs?