-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 01/07/2016 09:46 AM, Paul W. Frields wrote:
On Thu, Jan 07, 2016 at 08:33:37AM -0500, Josh Boyer wrote:
> On Thu, Jan 7, 2016 at 8:29 AM, Naheem Zaffar
> <naheemzaffar(a)gmail.com> wrote:
>> ESR will only delay the problem.
>>
>> Can the Fedora build add a secodary key to accept signed
>> extensions?
>
> This is one of the suggested solutions, but it is not currently
> implemented upstream.
>
>> AFAIK the long term plan is todeprecate the current method of
>> extensions in favour of a more browser agnostic approach.
>
> Correct.
Is it just me, or does it seem odd to take Mozilla to task for
doing something with their (relatively much larger) ecosystem we
also endeavor to do with Fedora's?
Could you explain what you mean? Mozilla's intent is lock-in: they're
providing exactly one source from which you can retrieve extensions.
With Fedora, we do signature signing for trust reasons, but you are
always offered a way to bypass that (or add your own keys, etc.)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iEYEARECAAYFAlaOgeIACgkQeiVVYja6o6PKkACfb8CWB3sXH+FpEPKngPKEtr/z
aSMAnRtno33NHpLn3d3T8xFCpC1Vhci/
=1ZRG
-----END PGP SIGNATURE-----