Stories
Slash Boxes
Comments

SoylentNews is people

posted by martyb on Friday May 10 2019, @09:50PM   Printer-friendly
from the what-browser-will-you-use-to-read-the-report? dept.

Eric Rescorla has a blog post over at Mozilla about the technical details on the recent Firefox add-on outage. He covers the background of how they use certificates, how they tried to mitigate the damage from the outage, how they worked to solve the problem without breaking more things, deployment of the replacement certificate, and why it took so long to fix.

Recently, Firefox had an incident in which most add-ons stopped working. This was due to an error on our end: we let one of the certificates used to sign add-ons expire which had the effect of disabling the vast majority of add-ons. Now that we've fixed the problem for most users and most people's add-ons are restored, I wanted to walk through the details of what happened, why, and how we repaired it.

There were a lot of work arounds discussed here and elsewhere, some of them quite stupid so, lastly, remember to undo any temporary work-arounds that might have been deployed last weekend.

Earlier on SN: In Firefox All Extensions Disabled Due to Expiration of Intermediate Signing Cert


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 5, Insightful) by Bot on Friday May 10 2019, @11:20PM

    by Bot (3902) on Friday May 10 2019, @11:20PM (#842129) Journal

    1. This is not a normal bug. It is a bug that prevents people to restore the old browser from a backup and keep working. People will hate FF for this.

    2. The browser is not an application, it's a virtual OS. The sites are the applications. As some applications still require some old OS, so does for example one of my home banking (hello java), and there are horror stories of other sites requiring SPECIFIC versions of java.
    So 'just update your browser' is like 'just update your OS', often unfeasible.

    --
    Account abandoned.
    Starting Score:    1  point
    Moderation   +3  
       Insightful=3, Total=3
    Extra 'Insightful' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   5