Mozilla further delays mandatory signing of add-ons in Firefox

Mozilla is deferring the company’s signature to add-ons until version 46 of the Firefox browser. Among other things, the developer first wants to introduce an add-on-related functionality in Firefox 45 before finally implementing the measures.

Mozilla announces that it is delaying the implementation of the signing requirement for several reasons. First, the company wants to introduce in Firefox 45 the ability for add-on developers to temporarily install unsigned add-ons that don’t require a restart. In addition, the company says it will also give all add-on developers time to obtain a signature from Mozilla before version 46 is released.

Mozilla originally wanted to have the measure implemented last year. With the current release version of Firefox, number 43, company signatures are already a requirement when installing an add-on. However, the option can still be turned off for those who want it: in the about:config menu, users must then set the xpinstall.signatures.required string to false. When Mozilla talks about making add-on signatures mandatory, the company is referring to removing this option. Add-ons that are not hosted by Mozilla will also have to be signed.

The signing is one way Mozilla tries to ensure that add-ons for its browser are free from major bugs and malware. Since a little over a year ago, the company has been transitioning to signed add-ons. At the time, Mozilla said it didn’t want to make a walled garden of its add-on market, so add-ons wouldn’t need to be signed from outside. However, a faq on the Mozilla wiki shows that the company has since moved away from that position. Version 46 of Firefox is scheduled for release on April 19 this year.