Bug#800150: iceweasel: Don't warn about unsigned extension installed via Debian packages

Kurt Roeckx kurt at roeckx.be
Sun Sep 27 12:01:08 UTC 2015


Package: iceweasel
Version: 40.0.3-3

Hi,

Mozilla is in the progress of requiring extentions to be signed,
which I think is a good thing.  However, for Debian packages we
already have it signed by the Developer uploading it, I see no
need to have Mozilla also sign it.  I suggest we don't warn /
disable about extentions installed on the system, but do require
the signature for those that are installed by browser itself.

As I understand it it's possible to have Mozilla's signature
installed by the Debian package, and I guess it would be nice to
have packages do that, but I see no need to require them to do
that and most don't seem to do that even though the upstream
version has been signed by Mozilla already.

This might be related to #798005, but I'm not really sure.


Kurt



More information about the pkg-mozilla-maintainers mailing list