Avast (Free) and Firefox 40

[aa.avast]

I downloaded Firefox 40 today and now in Firefox Add-Ons > Extensions I get the following message Avast Online Security could not be verified for use in Firefox

Same result in Windows XP and Windows 7 machines.

[ramram]

In Avast free it says 39.0.3 is the latest. This is a bug since the latest version is 40.0.0
I guess it will be resolved in a few days.... But it still is a bug.

[DavidR]

In Avast free it says 39.0.3 is the latest. This is a bug since the latest version is 40.0.0
I guess it will be resolved in a few days.... But it still is a bug.

It didn't in mine as the software updater reported a new firefox version/update available.

[DavidR]

I downloaded Firefox 40 today and now in Firefox Add-Ons > Extensions I get the following message Avast Online Security could not be verified for use in Firefox

Same result in Windows XP and Windows 7 machines.

This is firefox, for some time now add-ons have been signed, but not all add-ons are signed, so those will be flagged for caution. If you know the add-on then there should be no real problem. I have lots of add-ons that aren't signed, but I have been using them for some considerable time.

I don't know how various add-ons are signed, so we will just have to wait to see if it gets signed and by whom.

[aa.avast]

Thanks David / ramam   

[ky331]

EDIT:  See my reply #13 below for updated information...

I believe FF started "signing" extensions in late May.

Their announced plan [if they go through with it] is that UNsigned extensions will cease to work effective with the release of FF 41 ( 7 weeks from today).   Today's release starts WARNING users if they're using UNsigned extensions.

So unless the avast OS plug-in gets "signed" by Mozilla, it will be "voided" in FF's next [scheduled] release.

[DavidR]

I believe FF started "signing" extensions in late May.

Their announced plan [if they go through with it] is that UNsigned extensions will cease to work effective with the release of FF 41 ( 7 weeks from today).   Today's release starts WARNING users if they're using UNsigned extensions.

So unless the avast OS plug-in gets "signed" by Mozilla, it will be "voided" in FF's next [scheduled] release.

The problem with FF 41.0 if it follows through on that there are many old/discontinued add-ons that will be hit. I currently have 6 unsigned add-ons, the user should be able to take responsibility for their own choices.

[Cluster-Lizard2014]

If that is all true it is terrible news. I've just checked and I have three unsigned Extensions which include AdBlock Plus, WOT and Classic Theme Restorer. The latter, in particular, I would be gutted to lose.

[DavidR]

What version of Classic Theme Restorer ?
I have Classic Theme Restorer 1.3.7 and that isn't flagged - previously firefox 39.x annotated signed at the end of the add-ons - now they don't do that and only flag those which aren't signed. WOT and AdBlockPlus are the same not flagged.

I suggest that you try updating firefox if you haven't got FF 40.0 and the add-ons.

[Cluster-Lizard2014]

I haven't updated Firefox yet because the first I'd heard that FF40 had been released was when I read it here. I checked my Addons and saw that mysteriously their signed/unsigned status is now very prominent. I'm in two minds whether to update this this time and if FF41 is as described then I'll be sticking with the last version working with my Addons and hang on to it as long as possible. 

I've had prompts and updated FF twice recently, the previous time only last weekend to FF39.0.3. It really annoys me when they do that. Now we get this looming threat that some thing aren't going to work or, from the sound of it aren't going to be allowed to be used unless signed, with FF41.

It goes against the whole spirit of FF being able to control and customise it how you want.

Edit
I've checked on the Mozilla web site and I think a mistake has been made here. The threat to disallow unsigned addons will be from FF42 onwards. That's due for release in November. Until then unsigned addons will only be disabled by default. Users will still have the option to enable the Addons that are unsigned.

Updated FF39.0.3 to FF40 literally a minute ago and as far as I tell no problems with AVAST or anything else ie. no warning messages and all addons enabled and functioning right from the restart.   

[Gopher John]

Only extensions are checked for signing, and those that aren't signed are flagged but not disabled at this time.

https://support.mozilla.org/en-US/kb/add-on-signing-in-firefox?redirectlocale=en-US&redirectslug=add-ons-signing-firefox

[Cluster-Lizard2014]

At this time, yes, but the threat to them comes with FF42 in November.

It is getting a bit weird now.  Prior to the upadate to FF40 all the signed or unsigned Addon > Extensions were clearly shown but having updated that information is now absent. 

Also, as the OP stated I too am getting the warning message: "AVAST Online Security could not be verified for use with FF. Proceed with caution".  The inference is presumably that AVAST, because it is unsigned, is therefore a potential security threat just highlights how bloody stupid and useless the signing process is at IFF.     

[Asyn]

Hi guys, easy solution, use FF ESR.

[ky331]

The information I posted earlier has indeed been revised...

Updated information about FF's plans for banning unsigned extensions:

Firefox 40: Firefox warns about signatures but doesn't enforce them.

Firefox 41 (ETA Sept. 22) : Firefox will have a preference that allows signature enforcement to be disabled (xpinstall.signatures.required in about:config).   I take this to mean they will be disabled by default, but that this "feature" can be overridden.

Firefox 42 (ETA Nov. 3): Release and Beta versions of Firefox will not allow unsigned extensions to be installed, with no override.

See TIMELINE at https://wiki.mozilla.org/Addons/Extension_Signing

[DavidR]

<snip>
Firefox 40: Firefox warns about signatures but doesn't enforce them.

Firefox 41 (ETA Sept. 22) : Firefox will have a preference that allows signature enforcement to be disabled (xpinstall.signatures.required in about:config).   I take this to mean they will be disabled by default, but that this "feature" can be overridden.

Firefox 42 (ETA Nov. 3): Release and Beta versions of Firefox will not allow unsigned extensions to be installed, with no override.
<snip>

Looks like they have already done some preparation in the about:config settings, see image, which shows xpinstall.signatures.required is currently default set to false.

That is what is likely to change to true in FF 42.0 when it does, I really hope they aren't so blind/ridged  and the user can set that back to false.