Re: Proposal for improving the security of add-on updates

2007-06-22 Thread Arrakis
Why not use digital certificates provided by CACert. They are free, and have high levels of assurity, as opposed to a CAs like Verisign that have little to no assurity, and charge a ransom. Gervase Markham wrote: > Jean-Marc Desperrier wrote: >> I agree. *Therefore* Mozilla.org need to have it's

Master Password method

2007-06-18 Thread Arrakis
Greetings, I am trying to generate pre-configured credentials for Thunderbird, that have been Master Password encoded. Firstly, I notice there is no prefs.js configuration that tells the program that the Master Password has been set. Should I assume that Thunderbird/Firefox can figure this out si