Closed Bug 987056 Opened 7 years ago Closed 7 years ago

Plugin whitelist request: Nexus Personal BankID

Categories

(Firefox Graveyard :: Plugin Click-To-Activate Whitelist, defect)

defect
Not set
normal

Tracking

(Not tracked)

VERIFIED FIXED
Firefox 30

People

(Reporter: magnus.bergstedt, Assigned: benjamin)

Details

(Whiteboard: application complete - accepted)

<<Please supply the following information for new plugin whitelist requests>>

Plugin name: Nexus Personal (npBispBrowser.dll; npBispBrowser.bundle)
Vendor: Finansiell ID-Teknik BID (Financial ID-Technology)
Point of contact: magnus.bergstedt@bankid.com
Current version: 5.1.3
Download URL: https://install.bankid.com
Sample URL of plugin in use: https://test.bankid.com 

Plugin details: Installed as part of "BankID Security Application", that is used for the BankID e-ID that is widely used in Sweden, with around 50% of the population using it.

about:plugins

Win:
Nexus Personal
Fil: npBispBrowser.dll
Sökväg: C:\Program Files (x86)\BankID\npBispBrowser.dll
Version: 5.1.3.2
Status: Aktiverad
MIME-typ	Beskrivning	Filändelse
application/x-personal-regutil		
application/x-personal-version		
application/x-personal-webadmin		
application/x-personal-authentication		
application/x-personal-signer2	

Mac:
Nexus Personal    
Fil: npBispBrowser.bundle    
Sökväg: /Applications/BankID.app/Contents/Resources/npBispBrowser.bundle
Version: 5.1.3 
Status: Aktiverad
Nexus Plugin, providing authentication and signing features
MIME-typ	Beskrivning	Filändelse
application/x-personal-regutil	Enrollment	
application/x-personal-signer2	Signer XML	
application/x-personal-version	Version	
application/x-personal-webadmin	Administration	
application/x-personal-authentication	Authentication

Are there any variations in the plugin file name, MIME types, description, or version from one release to the next?
No

Are there any known security issues in current or older versions of the plugin?
No
Please provide details about your transition plan away from plugins. You can do that publicly here in the bug or by private mail to pluginwhitelist@mozilla.com
Status: UNCONFIRMED → NEW
Ever confirmed: true
Summary: We would like to whitelist an NPAPI plugin for Win and Mac → Plugin whitelist request: Nexus Personal BankID
Whiteboard: needs transition plan
Flags: needinfo?(magnus.bergstedt)
BankID is phasing out plugin use during 2014. All websites are required to have changed to the new solution by Q1 2015.
The current client software version includes plugins as well as the new solution. A version released early in 2015 will remove plugins.
Flags: needinfo?(magnus.bergstedt)
Is this new solution a web solution or does it still involve a Firefox extension or some binary code?
Flags: needinfo?(magnus.bergstedt)
No connection to the web browser is needed. The web page and the client software are not connected at the client side.
Flags: needinfo?(magnus.bergstedt)
Whiteboard: needs transition plan → application complete
Whiteboard: application complete → application complete - accepted
Builds for testing are now available at http://people.mozilla.org/~bsmedberg/plugin-whitelisting-91f6f3380041/

Please do a QA pass using a new Firefox profile to ensure that the plugin activates without a popup and appears as "Always Activate" in the addon manager. Report back in this bug when QA is complete. Please try to complete QA by the end of this week.
Flags: needinfo?(magnus.bergstedt)
QA completed successfully. No warnings appeared using the plugin. 
Sorry for late reporting.
Flags: needinfo?(magnus.bergstedt)
Fixed for Firefox 30 beta 1 in bug 9929995.
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → FIXED
Status: RESOLVED → VERIFIED
Target Milestone: --- → Firefox 30
Product: Firefox → Firefox Graveyard
You need to log in before you can comment on or make changes to this bug.