Hacker News new | ask | show | jobs
by zcid 3137 days ago
This point is irksome. How hard would it be to provide a switch to disable mandatory signing? Something similar to the unknown sources option in Android.

To all those claiming that Mozilla doesn't owe this to their users, you are technically correct. But why piss off users when you can easily satisfy them with a simple option. I shouldn't have to use a patched browser for something so basic.

2 comments

Last I knew, there were "unbranded" editions of Firefox - editions without the Firefox logo and name - which allowed users to disable the signing requirement. The ESR (extended service release) edition might also allow it.
Pretty easy, I think; there was a switch in the UI for a while, then hidden in about:config, then hard-coded into the browser.

I think that the issue was that they were worried about people who don't understand the security implications turning verification off and getting themselves into trouble.