I’m not sure. There are newsgroups/email lists (we port between the two) for development and I’m sure there are ones for Add On developers but I don’t know them.
That said, this is a made decision and I doubt it is likely to change. Firefox can’t have electrolysis and other enhancements to do with multi-process support and sandboxing if this work isn’t done and that work is a real priority.
hasn’t that been available in the developer edition since long before code signing? I though I opted to enable that months ago…
optional code signing shouldn’t affect any of those developments, the other changes are necessary though, code signing is just a security precaution, it doesn’t affect those things.
Yes, but… isn’t this like Microsoft not allowing software installs unless the software has been pre-approved, or you’re running a special build of Windows?
With Windows, the administrator can set it up so users in an enterprise (or home, or location) can’t install things willy-nilly. But that’s far away from the OS itself refusing all installs of non-Redmond-approved software.
Is this a poor comparison?
I know this isn’t your area - but I also knew you were a Mozillan, and so had irons in the fire without them being your special irons, if you know what I mean?
Google requires Chrome extensions to be signed and installed via the
Chrome store. Microsoft will do the same for Edge; its extensions will
be digitally signed and distributed through the Windows store. Mozilla
has similar plans for its new extensions.
Wouldn’t providing a whitelist ability for individual extensions or even individual developers (domains) reduce the bad effect of this choice, and add some grey into the all-or-nothing security picture?
Honest question because all I have had on my own computers recently is Linux: How good are the other current desktop operating systems at separating applications? I ask because you definitely don’t want an application running outside Firefox’ control whitelisting applications.