Comments on: Add-on Security Restrictions Landed http://www.oxymoronical.com/blog/2007/09/Add-on-Security-Restrictions-Landed Spouting nonsense from the depths of my spare time Sat, 14 Jan 2012 22:20:26 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Steffen Wilberg http://www.oxymoronical.com/blog/2007/09/Add-on-Security-Restrictions-Landed#comment-18 Steffen Wilberg Tue, 04 Sep 2007 21:25:10 +0000 http://www.oxymoronical.com/blog/2007/09/Add-on-Security-Restrictions-Landed#comment-18 StartSSL offers free SSL certs:<br> https://www.startssl.com/?app=1<br> <br> Just go and get one for your server. StartSSL offers free SSL certs:

https://www.startssl.com/?app=1

Just go and get one for your server.

]]> By: dafi http://www.oxymoronical.com/blog/2007/09/Add-on-Security-Restrictions-Landed#comment-17 dafi Tue, 04 Sep 2007 06:44:59 +0000 http://www.oxymoronical.com/blog/2007/09/Add-on-Security-Restrictions-Landed#comment-17 Please don't hate me but I'm not sure this approach is correct for poor extension's authors like me.<br> AMO doesn't publish my extensions because Remora app uses the ugly sandbox model.<br> - Many extensions live in sandbox for eternity so I can't use the AMO security trust<br> - I've my site on sourceforge the best free FOSS web space but I haven't SSL support<br> So I must buy HTTPS space and buy a certificate.<br> The self signed key seems the only way possibile for poor programmers.<br> <br> Why disabling extension?? Should be simpler disable *only* update so user know he/she must check for new version.<br> I understand this can be awful but user can continue to use extensions<br> <br> thanks<br> dafi<br> Please don’t hate me but I’m not sure this approach is correct for poor extension’s authors like me.

AMO doesn’t publish my extensions because Remora app uses the ugly sandbox model.

- Many extensions live in sandbox for eternity so I can’t use the AMO security trust

- I’ve my site on sourceforge the best free FOSS web space but I haven’t SSL support

So I must buy HTTPS space and buy a certificate.

The self signed key seems the only way possibile for poor programmers.

Why disabling extension?? Should be simpler disable *only* update so user know he/she must check for new version.

I understand this can be awful but user can continue to use extensions

thanks

dafi

]]>