From owner-freebsd-questions@freebsd.org Tue May 7 08:14:46 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6DD5815A2ED0 for ; Tue, 7 May 2019 08:14:46 +0000 (UTC) (envelope-from g8kbvdave@googlemail.com) Received: from mail-wm1-x32e.google.com (mail-wm1-x32e.google.com [IPv6:2a00:1450:4864:20::32e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 784BF76D4E for ; Tue, 7 May 2019 08:14:44 +0000 (UTC) (envelope-from g8kbvdave@googlemail.com) Received: by mail-wm1-x32e.google.com with SMTP id 198so1337720wme.3 for ; Tue, 07 May 2019 01:14:44 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding :content-language; bh=KBxicOoqqf05zgA48D1Zu1YFutyl3NuUN2ZqIchF10Y=; b=cdUKbgGWYPe4S9S9I/VBO/SvhnvFECGHaBhxMXnQxP6790mvdWUpWKvEElzhsSRIR8 KM7dDfH1GWbmd32cWnDeYHhHN4nAPoONHcX3Jpl2G+IQyPre8uC8K26OMN8jvjjJHkgr qntLq3uJz8xYttqyWHyqEG+lh3L/xOXyzsfW94m9BOcYqjnJtmDcVKMXqWmvzdPxtYOG dfHWkfPXxneFx6GWDnY09kRFSarqXA6adArcfNSSw2OtrIAW3n51GH9dn51zcaqMQK1f TLNBYSJTfifnXjNRZUpDhrxbU4b5emUWWxhWPzUipMmCTReAAheGkPm/KvvjRXC4DHHa ThJw== X-Gm-Message-State: APjAAAXClXYJD898YKHmujB1fiNfomAVcTnZEYdp2TzDfb/GNS2jxxpq vRZr6WdNpZ7JPqScNxLPGA7mOV6h X-Google-Smtp-Source: APXvYqzZ4Tj8egTYdDeTINZ1Uact40zMfnI20okYduAcJ+tDbxx+LofcL+hW9w0Fn0HGwbqE3709Ew== X-Received: by 2002:a1c:a74f:: with SMTP id q76mr10937050wme.152.1557216881989; Tue, 07 May 2019 01:14:41 -0700 (PDT) Received: from [192.168.2.55] ([217.41.35.220]) by smtp.gmail.com with ESMTPSA id b8sm8713056wrr.64.2019.05.07.01.14.40 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 07 May 2019 01:14:41 -0700 (PDT) Subject: Re: firefox 66.0.3 disables noscript To: freebsd-questions@freebsd.org References: From: Dave B Message-ID: <26069e39-44e4-42d7-aaaa-581c92afa8bf@googlemail.com> Date: Tue, 7 May 2019 09:14:39 +0100 User-Agent: Mozilla/5.0 (X11; Linux i686; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Content-Language: en-GB X-Rspamd-Queue-Id: 784BF76D4E X-Spamd-Bar: ------ X-Spamd-Result: default: False [-6.78 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; FREEMAIL_FROM(0.00)[googlemail.com]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[googlemail.com:+]; DMARC_POLICY_ALLOW(-0.50)[googlemail.com,quarantine]; MX_GOOD(-0.01)[alt3.gmail-smtp-in.l.google.com,alt4.gmail-smtp-in.l.google.com,gmail-smtp-in.l.google.com,alt2.gmail-smtp-in.l.google.com,alt1.gmail-smtp-in.l.google.com]; NEURAL_HAM_SHORT(-0.98)[-0.981,0]; FROM_EQ_ENVFROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[googlemail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; MID_RHS_MATCH_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[googlemail.com.dwl.dnswl.org : 127.0.5.0]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[googlemail.com:s=20161025]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; IP_SCORE(-2.79)[ip: (-9.38), ipnet: 2a00:1450::/32(-2.23), asn: 15169(-2.26), country: US(-0.06)]; RCVD_IN_DNSWL_NONE(0.00)[e.2.3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.5.4.1.0.0.a.2.list.dnswl.org : 127.0.5.0] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 May 2019 08:14:46 -0000 You can tell FF not to check certificates for add-on's, without affecting the usual certificate system. That is what I did to "restore" add-on functionality.   (But I only have one, "Ublock Origin", replaces addblock+ and no-script. Very low impact and no need to continually faff about with scriping settings.) ~ ~ ~ >From ZDnet:- For Firefox users that are currently impacted by this bug, an easy workaround would be to visit the  about:config  section and set  xpinstall.signatures.required  to false. This disables the extension signing mechanism in Firefox, the system through which the browser verifies that the local extension is one that's been installed from the central Mozilla Add-ons repository --and for which the signing certificate had expired. ~ ~ ~ However, it's now fixed, in other major OS version of FF, so perhaps someone needs to update the F'BSD version. (Once updated, you can of course re-instate add-on cert' checks...) Regards. Dave B.