1047274 - Need revocation for add-on signing certificates

Status: RESOLVED WONTFIX

(Core :: Security: PSM, defect)

Description

[Daniel Veditz [:dveditz]]

We can always blocklist a bad add-on, but we also need to be able to revoke the signing certificates used to sign them. If a developer leaks their private key we don't want to punish all that developers current users by blocking a perfectly good add-on, we simply want to prevent someone else from mis-using the cert.

Comment 1

[Dave Townsend [:mossop]]

Is this still something we need?

Comment 2

[Daniel Veditz [:dveditz]]

We can put this in a (much) later phase. If we do all the signing ourselves then blocking the add-on (by version if appropriate) is effectively equivalent to revoking the cert. We'd only have to worry about long-lived certs that might get stolen, such as the hotfix add-on.

If we ever progress to the point of issuing certificates to external folks then yes, we would want this. I expect we would piggy-back on the "OneCRL" mechanism mgoodwin created.

Comment 3

[:shell escalante]

we closed bug 1047269 as won't fix.  reopen this if we reopen that.