Firefox Extension Secure Updates

Mozilla is trying to beef up extension security in Firefox 3 by ensuring that the updates are provided by a secure address. All of the extensions on the official Mozilla add-ons site will work perfectly with this new system, but there could be problems when venturing outside of the site.

An example of this happened when I tried to install a development release of Tab Mix Plus. I was prompted with a message that said:

“Tab Mix Plus” will not be installed because it does not provide secure updates

As expected there is a hidden setting that you can adjust to prevent Firefox from checking the address from which an extension retrieves its updates. Here’s what you have to do:

  1. Start Firefox.
  2. In the Address Bar type “about:config” and press Enter.
  3. Right-Click and select New->Boolean.
  4. A box requesting the Preference Name will popup and you should enter “extensions.checkUpdateSecurity” (without the quotes). Press OK to continue.
  5. Select “False” from the box and press OK again.

After that you should be able to install your extensions just as you normally would. Disabling this feature could pose a security risk though, so be careful with what extensions you install when this is disabled.

There Are 8 Comments

  1. You should inform your readers about the dangers of that setting. The secure site check is a response to a real security threat.

  2. Good point, I just updated the post. Thanks Cory!

  3. but after installing the plugin, u can set the value to true, so its back to normal!

  4. Thanks for this tip.

    I was trying out creating extensions and was stuck with this error.
    I set the value to true after installing the extension (thanks stasik).

  5. Helpfull article !

  6. thank you very much, it helped me to install a Firefox plug in that didn’t wont to install before this setting.

  7. ty very much…i was very confused on what ta do.

  8. Thanks a lot.It solved my problem.

Leave Your Comment

Message is the only required field.
Emails are not published.