How would I sign a firefox addon that a developer no longer has up on the addon page but I saved it ?

By max22
in Web Browser Discussion & Support

 Share

Recommended Posts

Veteran

max22

Posted
  • Author
Posted

You'd have to submit it to Mozilla, but they'll only allow that if the original license allowed for you to do so.

So how do I find the original license holder ? So I can ask if it is ok ?

Someone already did it with the addon but it doesn't work right. The old one works great after manually installing it.

Grand Master

Anibal P

Posted
Posted

The alternative is compile firefox yourself and disable that sodding extension signing rubbish.

 

That's a horrible idea, up there with not using any AV or firewall on a computer 

The proper solution is to find a maintained extension that does the same thing, there is always an alternative 

Grand Master

n_K

Posted
Posted

 

That's a horrible idea, up there with not using any AV or firewall on a computer 

The proper solution is to find a maintained extension that does the same thing, there is always an alternative 

It's not even remotely related to not using a firewall or AV.

If I want to load an extension or make my own and use it, I damn well will, I couldn't give a ###### what mozilla try to do to stop me, you can't even compare someone writing an extension for a web browser and the browser having ###### unwanted 'you cant use this' protection against someone not using anti-virus software or a firewall to stop viruses/trojans/dodgy network traffic. Not even similar.

Grand Master

The_Decryptor Veteran

Posted
  • Veteran
Posted

...

If I want to load an extension or make my own and use it, I damn well will, I couldn't give a ###### what mozilla try to do to stop me, you can't even compare someone writing an extension for a web browser and the browser having ###### unwanted 'you cant use this' protection against someone not using anti-virus software or a firewall to stop viruses/trojans/dodgy network traffic. Not even similar.

You know you don't have to pay to have your addons signed right? Simply uploading them to addons.mozilla.org results in them getting signed.

I have no idea why anybody would be upset about addon signing.

Grand Master

n_K

Posted
Posted

You know you don't have to pay to have your addons signed right? Simply uploading them to addons.mozilla.org results in them getting signed.

I have no idea why anybody would be upset about addon signing.

It's not about cost, why the heck should I have to upload what I've written to mozilla for something that is not going to be released just for them to 'inspect it'? That's like saying games companies should give away their games to motherboard manufacturers so they can 'inspect how it runs' on their motherboards and certify it.

Enthusiast

aldago

Posted
Posted

unpack the extension, update the manifest file, zip as xpi, submit for signing, get a link to the extension and use it for yourself. Worst case scenario: extension is rejected due to coding issues and you have to update the code.

Grand Master

The_Decryptor Veteran

Posted
  • Veteran
Posted

It's not about cost, why the heck should I have to upload what I've written to mozilla for something that is not going to be released just for them to 'inspect it'? That's like saying games companies should give away their games to motherboard manufacturers so they can 'inspect how it runs' on their motherboards and certify it.

Then sign it yourself, Mozilla have said multiple time they aren't going to be the only people who can sign addons.

And game devs do give free copies of their games to hardware companies to see how it runs, it's great marketing for both of them.

Grand Master

+Warwagon MVC

Posted
  • MVC
Posted

Then sign it yourself, Mozilla have said multiple time they aren't going to be the only people who can sign addons.

But doesn't that defeat the purpose of signed addons if you can just sign it yourself.

Grand Master

The_Decryptor Veteran

Posted
  • Veteran
Posted

No? The whole point of code signing is so that you know the file is unchanged from the author.

Anybody can take an addon and sign it, but they can't make it appear to be from the original author.

Grand Master

n_K

Posted
Posted (edited)

Then sign it yourself, Mozilla have said multiple time they aren't going to be the only people who can sign addons.

And game devs do give free copies of their games to hardware companies to see how it runs, it's great marketing for both of them.

Go and read the mozilla post on the issue, you cannot sign them yourself, they MUST be uploaded to mozilla and have them approve and sign them
Edit: Here you go; https://blog.mozilla.org/addons/2015/02/10/extension-signing-safer-experience/

"Extension files that aren’t hosted on AMO will have to be submitted to AMO for signing. Developers will need to create accounts and a listing for their extension, which will not be public."

Enthusiast

aldago

Posted
Posted

Why not use the Firefox Developer Edition in this case?

because developer with e10 is crap (slow and constant crashes with flash). It's better to sign for your personal use the extension and be done with it.

Enthusiast

aldago

Posted
Posted

Well, as far as I know only Nightly and the Developer Edition (Aurora too?) has an override for the signing enforcement.

yes. I still think it's easier to submit the extension by yourself and get a signed version for your personal use (as long as you don't have to modify code to go through the automatic signing process) if you want to keep using a "stable" firefox version

This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.

  • Posts

    • Ford execs say they made a mistake when they replaced human engineers with AI

      By TsarNikky · Posted

      How many other companies will follow Ford's lead? Or, have they already gotten lazy and become enslaved to AI--and now can't figure out how to get out of that mess.
    • The Trump administration doesn't want you to use OpenAI's GPT-5.6 without its approval

      By TsarNikky · Posted

      Why would any self-respecting intelligent person follow any recommendation by Donald's GOP administration? With almost two years of fabrications, deceit, and blatantly illegal behavior, why believe them now? They had best be gone after the November 2026 election, so we'll wait and see.
    • AltSendme 0.4.1

      By Copernic · Posted

      AltSendme 0.4.1 by Razvan Serea AltSendme is a minimal, cross-platform application designed for fast, secure, and private peer-to-peer file transfers. It allows users to send files or entire directories directly between devices without relying on cloud servers, accounts, or any personal information. Everything is encrypted end-to-end using modern protocols like QUIC and TLS 1.3, ensuring both strong security and low-latency performance. Transfers are verified with BLAKE3 for data integrity, and interrupted downloads automatically resume, making the experience reliable even on unstable connections. You can transfer anything—images, videos, documents, and more. Integrity checks are performed on both ends, so your files are automatically verified for correctness during both sending and receiving. AltSendme works seamlessly across local networks or long-distance links, capable of saturating multi-gigabit connections for extremely fast delivery. With built-in NAT traversal and encrypted relay fallback, it connects devices almost anywhere. The app integrates with the Sendme CLI and will soon support mobile and web platforms. Fully free and open-source, AltSendme offers a lightweight, privacy-first alternative to traditional cloud-based services, removing size limits, upload costs, and unnecessary data exposure. AltSendme 0.4.1 changelog: Release Highlights Self-hosted relays: Run your own iroh relay so transfers don't rely on public infrastructure. Includes a full deployment template in deploy/relay/ with Docker Compose for a VPS and configuration examples for production use. Fly.io support: One-click deploy template for Fly.io, including a quick-start config (fly.dev.toml) for testing without a custom domain, plus production setup with Let's Encrypt and your own hostname. Relay settings UI: New Settings → Network panel to choose how AltSendme connects: automatic public relays, custom self-hosted URLs (with optional auth token), or disabled. Test connections, verify latency, and see live relay status in the footer. Disable relays: Turn off relay servers entirely when you only need same-network transfers (e.g. LAN). Direct connections only. No relay hop required when devices can reach each other. Android graduates from beta: Android is now part of the regular release cycle alongside desktop. APKs ship with each version (universal, arm64, and armv7). Other improvements Private relay access control via shared auth token Relay fallback notifications when a custom relay is unreachable Broadcast mode toggle in sharing settings Android release build fixes (split-per-ABI APKs, universal APK preservation) UI polish: mobile safe-area insets, dropzone layout, transfer progress animation Bug fixes for minification-related serialization issues and system tray icon loading What's Changed feat(relay): add relay status functionality and settings UI (a120cdf) feat(relay): implement custom relay server configuration and verification (51276c7) feat(relay): add configuration for private relay access and enhance observability features (48fbabf) feat(relay): enhance relay URL validation, display connection status (d4fffa0) feat(relay): add RelayChangeGuard component and enhance relay-related translations (16ba514) feat(broadcast): add toggle setting for broadcast mode in sharing UI (ca6d977) fix(relay): correct QUIC discovery port, pin image, templatize fly.dev (52a2ba5) fix: More broken serialization due to minification (67491a9) fix(android): preserve true universal APK across per-ABI builds (e9f256f) fix(ui): conditional safe-area insets padding on mobile (1182f0e) refactor(transfer): CircularRing component animation fix (944572b) chore(android): drop x86 and x86_64 release APKs, keep universal+arm64+armv7 (34ada0b) Download: AltSendme 0.4.1 | ARM64 | ~9.0 MB (Open Source) Download: AltSendme for MacOS | Android Links: AltSendme Home Page | GitHub | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Why Delta Chat is the best decentralized messenger you have probably never tried

      By zikalify · Posted

      You are mostly right about the ephemeral nature of it. As I mention in the article, if you dont add a second device or take a backup of your account before uninstalling it, then yes you will lose access to your account. That said, in terms of actual user experience when you sync multiple devices your message history carries across and there's also a Saved Messages chat like there is on Telegram to send messages and attachments between your installs. But yh, what you point out are correct and its not trying to emulate Messenger or Telegram.
    • You've tried DuckDuckGo and Brave Search, now get serious with SearXNG

      By zikalify · Posted

      OK so SearXNG is a meta search engine that you can install locally or use via a public instance. It scrapes other search engines which you choose and then sorts the results. Not as complicated as multiple relays

  • Recent Achievements

    • Week One Done
      flexorcist earned a badge
      Week One Done
    • One Month Later
      Woland13 earned a badge
      One Month Later
    • Week One Done
      Woland13 earned a badge
      Week One Done
    • One Year In
      bernmeister earned a badge
      One Year In
    • Week One Done
      Scoobystu earned a badge
      Week One Done

  • Popular Contributors

    1. 1
      +primortal
      495
    2. 2
      +Edouard
      225
    3. 3
      PsYcHoKiLLa
      150
    4. 4
      Steven P.
      75
    5. 5
      FloatingFatMan
      71
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!