nanog mailing list archives

RE: Widespread Firefox issues


From: "Keith Medcalf" <kmedcalf () dessus com>
Date: Sat, 04 May 2019 09:30:41 -0600


I will stick to the "clearly false" since it is now well to the point where we are in 2019-05-04 (even in local UT1, 
let alone UTC), studies are disabled (and have been since forever), no studies have been loaded, and my extensions 
still work quite fine, thank-you.  Attempting to install a "new" extension fails with a "bad signature" error.

Is the "permanent fix" going to be proper validation of signatures I wonder?
Or will they still consider the signature (made while there was ink in the pen) to be invalid after the pen runs out of 
ink?

Or, more accurately, not invalidate the handwritten signature after the death of the witness.  Lordy forbid that the 
"real world" worked like that ... invalidating the signature on a contract merely because the witness or signer got 
killed by a rogue bus ... What a lovely way to render a contract nul ab initio -- just kill one of the witnesses ...

---
The fact that there's a Highway to Hell but only a Stairway to Heaven says a lot about anticipated traffic volume.


-----Original Message-----
From: NANOG [mailto:nanog-bounces () nanog org] On Behalf Of Brielle
Bruns
Sent: Saturday, 4 May, 2019 08:30
To: nanog () nanog org
Subject: Re: Widespread Firefox issues

So, for being "Clearly false",  the hotfix pushed out by the Firefox
Studies feature is...

*drumroll*

An updated intermediate certificate!


You can turn on the Studies option under Privacy & Security for a
little
while, then check about:studies and you should see one or two in
there
regarding the xpi verification/signing.  Once you have those two
studies, you can disable Studies again.

Likely we'll see a full fix with a point release of Firefox in a day
or so.



On 5/3/2019 8:48 PM, Keith Medcalf wrote:

Clearly false, since it is 2019-05-04 02:46:31.342994 now and
nothing whatsoever happened to my Firefox browser, and all the
extensions are still working just fine.

---
The fact that there's a Highway to Hell but only a Stairway to
Heaven says a lot about anticipated traffic volume.


-----Original Message-----
From: NANOG [mailto:nanog-bounces () nanog org] On Behalf Of Brielle
Bruns
Sent: Friday, 3 May, 2019 19:56
To: NANOG list
Subject: Widespread Firefox issues

Just an FYI since this is bound to impact users:

https://bugzilla.mozilla.org/show_bug.cgi?id=1548973

Basically, Mozilla forgot to renew an intermediate cert, and
people's
Firefox browsers have mass-disabled addons.

Whoops.
--
Brielle Bruns
The Summit Open Source Development Group
http://www.sosdg.org    /     http://www.ahbl.org





--
Brielle Bruns
The Summit Open Source Development Group
http://www.sosdg.org    /     http://www.ahbl.org




Current thread: