Version 1.2.4 of the Remember Mismatched Domains extension for Firefox, Thunderbird and Seamonkey fixes a couple of parsing errors in the French language version and also includes a fix for the issue with the options window being cut off. As well, Alexander L. Slovesnik has provided a Russian translation.
Thanks to everyone for the bug reports and help with the “drive to localize” RMD.
I’ve just posted an update to the Remember Mismatched Domains extension for Firefox / Thunderbird / Seamonkey. Version is now 1.2.2. This release fixes the mess I made of the Polish language translation. Many thanks to Bartosz Piec who fixed the dtd files for me.
Its been awhile since I did this:
What is Remember Mismatched Domains?
The Remember Mismatched Domains extension for Firefox and Thunderbird adds a “Don’t warn me again about this certificate for this domain’ checkbox to the Domain Mismatch and Expired Certificate warning windows. When selected the domain name and security certificate domain pair (or certificate and expiration date pair) is stored in a Firefox / Thunderbird preference and the security error dialogue will be bypassed on subsequent visits.
How do I install the extension?
If you want to install the extension in Thunderbird, you have to follow these steps:
1. In your default browser, right-click on the download link. Choose the “Save link to disk…†option and download the XPI install file into a directory of your choosing.
2. Open Mozilla Thunderbird and open the ‘Extensions’ dialog by going to the ‘Tools’ -> ‘Extensions’ menu.
3. On the Extension dialog, there’s a button named ‘Install’ in the lower left corner. Click on it and browse to the directory where you saved the remember-mismatch.xpi.
4. Choose the file you downloaded earlier on and click ‘OK’.
Firefox users left click on the link.
Localization
The Remember Domain Mismatch Extension has been updated to version 1.2.1. This version adds localization support along with German, Polish and French language translations (thanks to contributions from a few generous RMD users).
More Secure
The other important change for this version is that RMD is now storing fingerprints (SHA1 and MD5) of the security certificate when the mismatch is remembered. This change makes the extension a little more strict in how it remembers a domain mismatch (or expired certificate), thus making things like certificate spoofing a little more difficult.
What This Change Means For You
Not a heck of alot, other than near complete peace of mind. Of course, as we all know, true peace of mind can only really be achieved through actual matching (and un-expired) security certificates.
Unfortunately, for users who have previous versions of RMD installed this update will also mean that you’ll have to accept the mismatch one more time. Now I know what you’re thinking – “all I have to do is re-remember the domain name mismatch and near peace of mind will be mine! How can I do this right now?”.
Here’s what I suggest you do:
- After installing the update and restarting Firefox or Thunderbird, attempt to connect to your previously remembered website or mail server with a mismatched certificate. You’ll be presented with the Domain Name Mismatch dialogue again (boo, hiss…).
- Examine the certificate by selecting ‘View Certificate’ (remember the old days when you did this each time you checked your email?). If you like, you can even note the SHA1 and MD5 fingerprints that RMD will store.
- Once you’re certain that you want to remember this mismatch check the ‘Don’t warn me again’ checkbox and accept the mismatch. Now everytime that website or mail server presents the certificate with those very fingerprints RMD will go back to automatically accepting it on your behalf.
- If you open the options window for RMD you can view the fingerprints for each mismatch entry by making the Certificate Fingerprint columns visible. Do this by clicking the column picker widget (highlighted in red below). Entries that have no fingerprints stored are legacy entries from previous versions of RMD and can be deleted.
Download
Download the Remember Mismatched Domains extension:
https://addons.mozilla.org/extensions/moreinfo.php?id=2131
update one: argh, okay the udpate needs to be accepted by addons.mozilla.org before being made available for download. I’ll post it here for those who just can’t wait.
As always please use the comments section (or email) for any feedback / questions / bugs.
update two: editorial – clarified some awkward wording
Geoff Stearns who is the author of the popular FlashObject Javascript library has a post describing a somewhat disconcerting exchange with Adobe’s legal department. According to Geoff they have requested that he stop using the word “Flash” in his project name. Geoff, somewhat grudgingly, has agreed to rename the project SWFObject.
I really do hope this is just a matter of Adobe’s legal and public relations not consulting one another. In any event, it makes it clear that Adobe needs to provide a clear statement on it’s perspective regarding trademark infringement (and other legal issues) and then enforce it in a reasonable and consistent manner. I think this would also help clear up some of the legal ambiguity of a few open source Flash projects.
The OSFlash mailing list currently has some discussion on the matter in this thread. And Peter Elst has posted a good level headed appeal to Adobe regarding this manner.
Adobe have put together an extension (.mxp) for the Flash 8 IDE that updates the publishing templates to include a workaround to the Internet Explorer Activate ActiveX changes.
Details and a link to the extension download are here:
http://www.macromedia.com/go/7c29e252
