On Thu, Jan 07, 2016 at 10:46:29AM -0500, Stephen Gallagher wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 01/07/2016 10:30 AM, Martin Stransky wrote: > > On 01/07/2016 04:19 PM, Stephen Gallagher wrote: > >> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > >> > >> On 01/07/2016 09:46 AM, Paul W. Frields wrote: > >>> On Thu, Jan 07, 2016 at 08:33:37AM -0500, Josh Boyer wrote: > >>>> On Thu, Jan 7, 2016 at 8:29 AM, Naheem Zaffar > >>>> <naheemzaffar@xxxxxxxxx> wrote: > >>>>> ESR will only delay the problem. > >>>>> > >>>>> Can the Fedora build add a secodary key to accept signed > >>>>> extensions? > >>>> > >>>> This is one of the suggested solutions, but it is not > >>>> currently implemented upstream. > >>>> > >>>>> AFAIK the long term plan is todeprecate the current method > >>>>> of extensions in favour of a more browser agnostic > >>>>> approach. > >>>> > >>>> Correct. > >>> > >>> Is it just me, or does it seem odd to take Mozilla to task for > >>> doing something with their (relatively much larger) ecosystem > >>> we also endeavor to do with Fedora's? > >>> > >> > >> Could you explain what you mean? Mozilla's intent is lock-in: > >> they're providing exactly one source from which you can retrieve > >> extensions. With Fedora, we do signature signing for trust > >> reasons, but you are always offered a way to bypass that (or add > >> your own keys, etc.) > > > > I'm sure you're wrong here. lock-in means you can't change your > > software. How is it related here? How are you locked and by what? > > You can use the unbranded Firefox with your own extension without > > any limitations. > > > > Right, you can't change the software and still call it "Firefox". If > you want to use "Firefox", you must only use the extensions permitted > by Mozilla. > > Let's take another example: iOS and Android. iOS is allows only signed > software to be run on it. All software run locally on this operating > system must be acquired only from the iTunes store. Android operates > similarly by default, allowing only carrier-installed software and > content from the Google Play store, but it also offers an option in > the settings to allow users to install packages from elsewhere as well. > > Mozilla in this metaphor is striving to become iOS: you can only > install Mozilla-approved software. In order to retain control of your > own choices, you must switch browsers (either to Icecat or similar or > else to the nightly developer edition). The nightly developer edition is still Firefox, just with new stuff. You don't have to give up the browser entirely. It seems to me the XO in its normal operating mode was a similar case here. I hope no one would claim that was non-free. -- Paul W. Frields http://paul.frields.org/ gpg fingerprint: 3DA6 A0AC 6D58 FEC4 0233 5906 ACDB C937 BD11 3717 http://redhat.com/ - - - - http://pfrields.fedorapeople.org/ The open source story continues to grow: http://opensource.com -- desktop mailing list desktop@xxxxxxxxxxxxxxxxxxxxxxx http://lists.fedoraproject.org/admin/lists/desktop@xxxxxxxxxxxxxxxxxxxxxxx
