{"id":7616,"date":"2015-12-01T15:34:19","date_gmt":"2015-12-01T23:34:19","guid":{"rendered":"http:\/\/blog.mozilla.org\/addons\/?p=7616"},"modified":"2016-02-01T13:34:21","modified_gmt":"2016-02-01T21:34:21","slug":"de-coupling-reviews-from-signing-unlisted-add-ons","status":"publish","type":"post","link":"https:\/\/blog.mozilla.org\/addons\/2015\/12\/01\/de-coupling-reviews-from-signing-unlisted-add-ons\/","title":{"rendered":"De-coupling Reviews from Signing Unlisted Add-ons"},"content":{"rendered":"

tl;dr<\/strong> – By the end of this week (December 4th), we plan to completely automate the signing of unlisted add-ons and remove the trigger for manual reviews.<\/p>\n

Over the past few days, there have been discussions around the first step of the add-on signing process, which involves a programmatic review of submissions by a piece of code known as the “validator”. The validator can trigger a manual review of submissions for a variety of reasons and halt the signing process, which can delay the release of an add-on because of the signing requirement that will be enforced in Firefox 43 and later versions.<\/p>\n

There has been debate over whether the validator is useful at all, since it is possible for a malicious player to write code that bypasses it. We agree the validator has limitations; the reality is we can only detect what we know about, and there’s an awful lot we don’t know about. But the validator is only one component of a review process that we hope will make it easier for developers to ship add-ons, and safer for people to use them. It is not meant to be a catch-all malware detection utility; rather, it is meant to help developers get add-ons into the hands of Firefox users more expediently.<\/p>\n

With that in mind, we are going to remove validation as a gating mechanism for unlisted add-ons. We want to make it easier for developers to ship unlisted add-ons, and will perform reviews independently of any signing process. By the end of this week (December 4th), we plan to completely automate the signing of unlisted add-ons and remove the trigger for manual reviews. This date is contingent on how quickly we can make the technical, procedural, and policy changes required to support this. The add-ons signing API, introduced earlier this month<\/a>, will allow for a completely automated signing process, and will be used as part of this solution.<\/p>\n

We’ll continue to require developers to adhere to the Firefox Add-ons policies outlined on MDN<\/a>, and would ask that they ensure their add-ons conform to those polices prior to submitting them for signing. Developers should also be familiar with the Add-ons Reviewer Guide<\/a>, which outlines some of the more popular reasons an add-on would fail a review and be subject to blocklisting.<\/p>\n

I want to thank everyone for their input and insights over the last week. We want to make sure the experience with Firefox is as painless as possible for Add-on developers and users, and our goals have never included “make life harder”, even if it sometimes seems that way. Please continue to speak out, and feel free to reach out to me or other team members directly.<\/p>\n

I’ll post a more concrete overview of the next steps as they\u2019re available, and progress will be tracked in bug 1229197<\/a>. Thanks in advance for your patience.<\/p>\n

kev<\/p>\n","protected":false},"excerpt":{"rendered":"

tl;dr – By the end of this week (December 4th), we plan to completely automate the signing of unlisted add-ons and remove the trigger for manual reviews. Over the past … Read more<\/a><\/p>\n","protected":false},"author":287,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[121],"tags":[],"yoast_head":"\nDe-coupling Reviews from Signing Unlisted Add-ons - Mozilla Add-ons Community Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.mozilla.org\/addons\/2015\/12\/01\/de-coupling-reviews-from-signing-unlisted-add-ons\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kev Needham\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.mozilla.org\/addons\/2015\/12\/01\/de-coupling-reviews-from-signing-unlisted-add-ons\/\",\"url\":\"https:\/\/blog.mozilla.org\/addons\/2015\/12\/01\/de-coupling-reviews-from-signing-unlisted-add-ons\/\",\"name\":\"De-coupling Reviews from Signing Unlisted Add-ons - Mozilla Add-ons Community Blog\",\"isPartOf\":{\"@id\":\"https:\/\/blog.mozilla.org\/addons\/#website\"},\"datePublished\":\"2015-12-01T23:34:19+00:00\",\"dateModified\":\"2016-02-01T21:34:21+00:00\",\"author\":{\"@id\":\"https:\/\/blog.mozilla.org\/addons\/#\/schema\/person\/2160114edcedd6631a079251326d6a53\"},\"breadcrumb\":{\"@id\":\"https:\/\/blog.mozilla.org\/addons\/2015\/12\/01\/de-coupling-reviews-from-signing-unlisted-add-ons\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.mozilla.org\/addons\/2015\/12\/01\/de-coupling-reviews-from-signing-unlisted-add-ons\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.mozilla.org\/addons\/2015\/12\/01\/de-coupling-reviews-from-signing-unlisted-add-ons\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.mozilla.org\/addons\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"De-coupling Reviews from Signing Unlisted Add-ons\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.mozilla.org\/addons\/#website\",\"url\":\"https:\/\/blog.mozilla.org\/addons\/\",\"name\":\"Mozilla Add-ons Community Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.mozilla.org\/addons\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.mozilla.org\/addons\/#\/schema\/person\/2160114edcedd6631a079251326d6a53\",\"name\":\"Kev Needham\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/addons\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/7ac7af0738840c3d6aa0bcecbbc0d081?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/7ac7af0738840c3d6aa0bcecbbc0d081?s=96&d=mm&r=g\",\"caption\":\"Kev Needham\"},\"description\":\"Canadian Mozillian working to make Add-ons in Firefox awesome.\",\"url\":\"https:\/\/blog.mozilla.org\/addons\/author\/kneedhammozilla-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"De-coupling Reviews from Signing Unlisted Add-ons - Mozilla Add-ons Community Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.mozilla.org\/addons\/2015\/12\/01\/de-coupling-reviews-from-signing-unlisted-add-ons\/","twitter_misc":{"Written by":"Kev Needham","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/blog.mozilla.org\/addons\/2015\/12\/01\/de-coupling-reviews-from-signing-unlisted-add-ons\/","url":"https:\/\/blog.mozilla.org\/addons\/2015\/12\/01\/de-coupling-reviews-from-signing-unlisted-add-ons\/","name":"De-coupling Reviews from Signing Unlisted Add-ons - Mozilla Add-ons Community Blog","isPartOf":{"@id":"https:\/\/blog.mozilla.org\/addons\/#website"},"datePublished":"2015-12-01T23:34:19+00:00","dateModified":"2016-02-01T21:34:21+00:00","author":{"@id":"https:\/\/blog.mozilla.org\/addons\/#\/schema\/person\/2160114edcedd6631a079251326d6a53"},"breadcrumb":{"@id":"https:\/\/blog.mozilla.org\/addons\/2015\/12\/01\/de-coupling-reviews-from-signing-unlisted-add-ons\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.mozilla.org\/addons\/2015\/12\/01\/de-coupling-reviews-from-signing-unlisted-add-ons\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/blog.mozilla.org\/addons\/2015\/12\/01\/de-coupling-reviews-from-signing-unlisted-add-ons\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.mozilla.org\/addons\/"},{"@type":"ListItem","position":2,"name":"De-coupling Reviews from Signing Unlisted Add-ons"}]},{"@type":"WebSite","@id":"https:\/\/blog.mozilla.org\/addons\/#website","url":"https:\/\/blog.mozilla.org\/addons\/","name":"Mozilla Add-ons Community Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.mozilla.org\/addons\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.mozilla.org\/addons\/#\/schema\/person\/2160114edcedd6631a079251326d6a53","name":"Kev Needham","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/addons\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/7ac7af0738840c3d6aa0bcecbbc0d081?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/7ac7af0738840c3d6aa0bcecbbc0d081?s=96&d=mm&r=g","caption":"Kev Needham"},"description":"Canadian Mozillian working to make Add-ons in Firefox awesome.","url":"https:\/\/blog.mozilla.org\/addons\/author\/kneedhammozilla-com\/"}]}},"_links":{"self":[{"href":"https:\/\/blog.mozilla.org\/addons\/wp-json\/wp\/v2\/posts\/7616"}],"collection":[{"href":"https:\/\/blog.mozilla.org\/addons\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mozilla.org\/addons\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/addons\/wp-json\/wp\/v2\/users\/287"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/addons\/wp-json\/wp\/v2\/comments?post=7616"}],"version-history":[{"count":0,"href":"https:\/\/blog.mozilla.org\/addons\/wp-json\/wp\/v2\/posts\/7616\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.mozilla.org\/addons\/wp-json\/wp\/v2\/media?parent=7616"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mozilla.org\/addons\/wp-json\/wp\/v2\/categories?post=7616"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mozilla.org\/addons\/wp-json\/wp\/v2\/tags?post=7616"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}