extensions signing

[Coq_gaulois]

Hello,
I've noticed that Adblock plus and Element hiding helper are not signed.
I read in that article : https://wiki.mozilla.org/Addons/Extension_Signing that with Firefox 44 unsigned extensions will not be allowed by the browser.

Are you gonna sign these two in the next weeks (or months)? I guess yes !

Thanks !

and good day!

[Gingerbread Man]

Hello,

The release and development builds of both extensions have been signed for some time.
Mozilla is in charge of signing extensions, not the extension authors, as is explained in the article you linked to:

How do I get my add-ons signed if they are hosted on AMO?

• No action is required. We automatically signed (sic) reviewed versions of all add-ons currently hosted on AMO. All new versions will be signed automatically after they pass review.

[Coq_gaulois]

OK so all is fine (in my list of extensions "-signed" is not written after the name of adblock and element hiding helper that's why I asked).

Best wishes!

[Gingerbread Man]

Mozilla dropped the -signed suffix for extension versions some time ago. All reviewed extensions on the Firefox add-ons site were signed as early as June 10th:

… all AMO extensions for Firefox that passed review have been signed, and all new versions will be signed once they pass review.

— https://blog.mozilla.org/addons/2015/06 ... update-66/

[stefane23]

Mozilla says that all new updates of add-on extensions need to be reviewed and signed, I do not feel that the question has been answered. Why doesn't Adblock Plus version on the AMO website state clearly that it is signed. I didn't read anywhere in Jorge Villalobos's article that the suffix "signed" has been or can be dropped. He only indicated that those updates or new versions would also require reviewing and signing. It is so easy to add the suffix "signed" and avoid confusion for potential new users. So what is the argument behind making sure that it is not there. Moreover, in the explanations section about the new version, it is noted nowhere that it has been reviewed and signed by Firefox. Is the newest version of Adblock still being reviewed by Firefox or not, since it is stated in your linked document that it takes 7 weeks for the review of such updates and that 101 updates are still in the reviewing queue? If not, can you point us to any place where it is stated that it has been reviewed and signed? Thanks...Stefane

[mapx]

if you go to
https://addons.mozilla.org/en-US/firefo ... lock-plus/

you'll see ABP is "featured" which means a trustworthy addon.

Featured add-ons are top-quality extensions and themes highlighted on AMO, Firefox's Add-ons Manager, and across other Mozilla websites

https://developer.mozilla.org/en-US/Add ... y/Featured

[stefane23]

Hi Mapx,

I thank you for the reply. I did observe that Adblock Plus was a "featured" add-on. However, could you please tell me (as a newbie) which of the two parties (developer or AMO editors) decide whether or not the suffix "signed" appears after the updated version? Its absence only creates confusion and raises unnecessary questions. Thanks. Stefane

[mapx]

As you can see above, mozilla dropped that suffix (-signed). If a version is in mozilla store is also reviewed (by mozilla).
see also
https://wiki.mozilla.org/Addons/Extension_Signing

[Gingerbread Man]

Why doesn't Adblock Plus version on the AMO website state clearly that it is signed.

Like I said, all reviewed extensions are signed now. Presumably Mozilla consider it would be pointless to mention such a technical detail for each and every extension. They do the opposite: mention when a particular extension isn't fully reviewed (and therefore not signed). Feel free to ask them for clarification:
https://discourse.mozilla-community.org ... ozilla-org

Moreover, in the explanations section about the new version, it is noted nowhere that it has been reviewed and signed by Firefox.

First of all, Firefox is a web browser. It doesn't sign anything. Secondly, in the above blog post, it's noted that all reviewed extensions are signed. That's the vast majority of them, since most are reviewed.

If not, can you point us to any place where it is stated that it has been reviewed and signed?

All extensions with a green “Add to Firefox” button are fully reviewed; all fully reviewed extensions are signed.

Are add-ons safe to install?
Unless clearly marked otherwise, add-ons available from this gallery have been checked and approved by Mozilla's team of editors and are safe to install.

— https://addons.mozilla.org/faq

[lewisje]

For a clear example of an unsigned extension, install the MEGA extension.