Add-on in Mozilla library that is not verified

RESOLVED INVALID

Status

Thunderbird
Untriaged
RESOLVED INVALID
2 years ago
2 years ago

People

(Reporter: Liejan van Horen-Meeusen, Unassigned)

Tracking

45 Branch

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Reporter)

Description

2 years ago
Created attachment 8813704 [details]
Error message Thunderbrid.jpg

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:50.0) Gecko/20100101 Firefox/50.0
Build ID: 20161114144739

Steps to reproduce:

I tried to install importexporttools-3.2.4.1-sm+tb with the option Install add-on by file.


Actual results:

Error message 'Author not verified', but the add-on is in Mozilla's library https://addons.mozilla.org/nl/thunderbird/extensions/miscellaneous/. I did send the author a message to ask him to have the add-on verified.


Expected results:

Installing importexporttools-3.2.4.1-sm+tb.

Comment 1

2 years ago
I don't see this as exploitable, do you?
Flags: needinfo?(mkmelin+mozilla)

Comment 2

2 years ago
No there's nothing strange about that.

And, verification is not signing. Verification gives you very little...
Group: mail-core-security
Status: UNCONFIRMED → RESOLVED
Last Resolved: 2 years ago
Flags: needinfo?(mkmelin+mozilla)
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.