←back to thread

1318 points xvector | 1 comments | | HN request time: 0.241s | source
Show context
MrEldritch ◴[] No.19823726[source]
This is a goddamned disaster. I'm just thankful that I use an offline password manager, but even still ...

I like FF, don't get me wrong, but this is going to absolutely fucking destroy user trust in Mozilla. This kind of incompetence, on a browser scale, is breathtaking.

replies(7): >>19823747 #>>19823877 #>>19823883 #>>19823946 #>>19824062 #>>19824099 #>>19824204 #
unreal37 ◴[] No.19824099[source]
Seems like an over-reaction. "Destroy user trust in Mozilla?" Really? Because your extensions got disabled for a day?
replies(2): >>19824247 #>>19824485 #
jchw ◴[] No.19824485[source]
(Big fat disclaimer: I work for Google. These are my opinions and not my employers. I don't work on browsers. I test my code in Firefox. Etc etc.)

Sadly, I have to agree that this feels like a big blow to user trust.

User trust is not really just about respect or values; it definitely also includes things like performance and reliability. The average user, right now feeling powerless, might even feel anger towards Mozilla for this - after all, they already downloaded the extension, why would they all just stop working behind their backs? They don't understand what CAs are or why certificates expire. People don't frankly care what place your heart is in when they are angry about something. Perhaps people are being dramatic, but that's normal. People are pretty darn dramatic about Chrome, too.

Meanwhile... I use Firefox everywhere, and I've lost my password manager, adblocking, security-related extensions, etc. all in one go, and the only solutions I'm aware of involve disabling extension signing. Gotta admit, even though I will probably continue using Firefox after this, that it certainly is a bummer.

replies(2): >>19824526 #>>19824547 #
drewmol ◴[] No.19824547[source]
I know the typical user my have struggles but FWIW, I installed nightly, toggled xpinstall.signatures.required to False installed ublock umatrix and will live with my pw manager's native application for a day or two and it took about 5 minutes.
replies(1): >>19824561 #
1. jchw ◴[] No.19824561[source]
In fairness: I don't really want to disable signature checking. I value these security features and I'm hoping that by tomorrow morning Mozilla has a better solution.