by redriver97 » Wed May 15, 2019 6:11 pm
barbaz wrote: ↑Wed May 15, 2019 3:24 pm
redriver97 wrote: ↑Wed May 15, 2019 3:02 pm
from what i've read the option to keep xpinstall.signatures.required to false is not recommended right, due to security issues?
No, you're not opening yourself up to security issues.
The original rationale for requiring signing was something about reducing "greyware/crapware". But if you're careful what you install -
as you should be anyway - then you won't have crapware addons anyway, and thus you don't need the required signing.
EDIT I should be clear that "careful what you install" not only applies to Firefox addons, but also system programs. Some installers try to side-load various "optional offers" (read: bundled crapware) that you have to explicitly opt out of. In theory such side-loaded crapware could include Firefox extensions.
Thanks for the feedback.
Well,i have only ever used 5 add-ons for years - for IDM,JDownloader,NoScript,UBlock Origin and Zenmate,all legit and used by millions i'm sure.I don't need any more stuff.The less,the better is my mantra.The same goes for any apps,i use basic stuff - an anti-virus (Avira), IDM/utorrent/jDownloader for downloads, VLC for multimedia...basic apps.
I guess i was worried about security issues,mostly malicious stuff being downloaded in background without my knowledge if i used the 'false' value, but i might go with the 'false' value now that you've clarified the issue.
[quote=barbaz post_id=100206 time=1557933858 user_id=181509]
[quote=redriver97 post_id=100205 time=1557932520 user_id=270888]
from what i've read the option to keep xpinstall.signatures.required to false is not recommended right, due to security issues?
[/quote]
No, you're not opening yourself up to security issues.
The original rationale for requiring signing was something about reducing "greyware/crapware". But if you're careful what you install - [b]as you should be anyway[/b] - then you won't have crapware addons anyway, and thus you don't need the required signing.
EDIT I should be clear that "careful what you install" not only applies to Firefox addons, but also system programs. Some installers try to side-load various "optional offers" (read: bundled crapware) that you have to explicitly opt out of. In theory such side-loaded crapware could include Firefox extensions.
[/quote]
Thanks for the feedback.
Well,i have only ever used 5 add-ons for years - for IDM,JDownloader,NoScript,UBlock Origin and Zenmate,all legit and used by millions i'm sure.I don't need any more stuff.The less,the better is my mantra.The same goes for any apps,i use basic stuff - an anti-virus (Avira), IDM/utorrent/jDownloader for downloads, VLC for multimedia...basic apps. ;)
I guess i was worried about security issues,mostly malicious stuff being downloaded in background without my knowledge if i used the 'false' value, but i might go with the 'false' value now that you've clarified the issue.