[arch-general] Firefox without signature checking

[Bruno Pagani]

Le 03/01/2016 02:24, Magnus Therning a écrit :
> Doug Newgard writes:
>
>> On Sat, 2 Jan 2016 15:26:59 -0800
>> Kyle Terrien <kyleterrien at gmail.com> wrote:
>>
>>> On 01/02/2016 02:50 PM, Doug Newgard wrote:
>>>> On Sat, 2 Jan 2016 15:35:01 -0700
>>>> Leonid Isaev <leonid.isaev at jila.colorado.edu> wrote:
>>>>
>>>>> On Sat, Jan 02, 2016 at 02:06:05PM -0800, Kyle Terrien wrote:
>>>>>> Thank you!  I was tempted to reopen it, but it looks like the general
>>>>>> consensus is that an AUR package will be submitted.
>>>>> You can only request to reopen...
>>>> And that request would be denied unless you can bring new info to the table. So
>>>> far, I haven't seen any.
>>> The new info I have is that Mozilla is creating a walled garden.  There
>>> is no way to override it besides rebuilding Firefox.
>> That's not new info, that's the same argument that was already rejected.
> The issue in question ([1]) was raised before release 43, where
> signature checking, AFAIU was turned on by default but could be manually
> disabled.
>
> The new info would be that for release 44, signature checking would not
> only be turned on by default but there would be no way to disable it.
>
> Do not confuse "no new info" with "there is new info, but that doesn't
> change our decision."
>
> The larger, and very philosophical question is "How user un-friendly can
> upstream make it before Arch decides to *not* package as upstream
> intends?" (Answering this requires keeping in mind that Arch users are
> unlikely to fall squarely into the target group of upstream.)
>
> /M
>
> [1]: https://bugs.archlinux.org/task/45900

Sorry but you missed something: even if it was indeed prior to 43, this
is still no new info. Because if you read the bug carefully, you will
see this line:

“ - Firefox 42: Release and Beta versions of Firefox will not allow
unsigned extensions to be installed, with no override.”

So the fact is just that as ever with Mozilla since the beginning of
Firefox, it has been pushed two releases later. But overall, it’s still
the same. ;)

Bruno

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <https://lists.archlinux.org/pipermail/arch-general/attachments/20160103/4c14ec1e/attachment.asc>