Extensions are cool
Extension frameworks are a good way to add new functionality to large applications that are messy to alter directly, they also help to quickly add functionality now, without having to wait six months for the next release.
The whole fun of extensions is that you can make your own and download random ones from the Internet, try them out for a bit, remove the ones you don't like, share the ones you do.
This of course implies two things. Firstly, that the extension interface is well thought out so that a badly written extension does not crash or unexpectedly interfere with the main application. Secondly, that the user who installs the application is adept enough to know what they are doing.
The killer feature of Firefox has been its extension framework, having hundreds or even thousands of useful extensions is what has enabled Firefox to break into the IE-dominated browser market where so many have failed.
All your extensions belong to us
Firefox 3 has changed many things compared to previous versions. One unexpected change is that the extension framework has been locked down.
I have mixed feelings about this. I understand there is a balance between on the one hand, fun and spontaneity, and on the other hand, protecting clueless people from themselves. However, for me, I hate software designed as a jail for idiots. That is why I refuse to use Windows for anything beyond testing that web applications work on it.
Firefox 3's extensions framework has a new DRM-like security barrier. You have to either submit your extension to be vetted and hosted by Mozilla, or you must use SSL, or use cryptographic keys.
I am all in favour of cryptography (as long as it is open for everyone to play), but I would be worried if this implementation makes it harder for people to write and share updates.
Computer says no
I tried to install an extension the old fashion way, by going to the author's homepage and clicking on link to install the extension.
Firstly, there a warning popped up, the same warning that was also in Firefox 2:
So I clicked "Allow" and then reclicked the install link.
Then, like a naughty child, we have to wait 4 seconds as a cooling off period, before we can click "Install".
Thirdly, even though we clicked "Allow", then were put into time-out like a child, then clicked "Install", it flatly refused to do what I had told it to do:
'Secure' here being defined as "approved by Mozilla", very few Firefox extensions are secure in the formal sense of 'trusted'.
I am root
I have to admit that this gets on my nerves somewhat. I am the master of my own computer, I don't mind software being a friend and warning me once about something. However, I cannot tolerate nanny software that takes over and tells me what I can't do and stops me from doing it.
I don't want to be a techno-snob but we should not make software for the lowest common denominator; maybe using Internet connected computers unsupervised is not suitable for everyone. We should not lockdown everyone's else computers because some people are idiots.
Computers have become the an extremely widespread technology, perhaps only second to cars in their spread. With cars, we don't let absolutely everyone drive. We don't make cars that refuse to start if the weather is not optimal, we instead let cars work in the rain and trust the driver to make allowances for poor weather.
Fortunately, in Firefox, the extension censorship can be overridden in the about:config settings dialog. So I went to Firefox 3's about:config page, and guess what? Yes you guessed it, they have added another new confirmation screen!
I am sure some of you will have strong views either way on this. Let me know!
Discuss this post - Leave a commentMay 22, 2008 07:13 PM :: West Midlands, England 











He drove past me going about 65, I was doing 60. I then caught up to him, and as soon as I passed him, he slowed down to about 2 car-lengths behind me, pressed the gas just a bit, and I'll be darned if I didn't hear the unmistakable sound of the supercharger waking up.







