DashlaneCaden t1_j8ecrbu wrote on February 13, 2023 at 6:13 PM

Reply to comment by 56kul in Millions of passwords stolen from LastPass earlier than company disclosed: Report by BasedSweet

Absolutely!

So I cannot speak to why we went the route of hosting the extension ourselves rather than listing via the Firefox add-on store in the first place, but I can say it's on our roadmap to explore listing this year. I'm not on the team that handles our store automation & deployment processes, but from my understanding there is some work needed making the migration still & it's slated this year (with no specific date planned yet).

Our hosted version will still receive automatic updates, we're just missing out on the marketing / discoverability that the add-on store provides.

56kul t1_j8ed5jp wrote on February 13, 2023 at 6:15 PM

Well, I just hope it’ll be resolved soon.

I definitely trust that your self-hosted extension is safe, but I’m not a fan of using such extensions. I just like the piece of mind of using one directly from the store.

DashlaneCaden t1_j8ee111 wrote on February 13, 2023 at 6:21 PM

Ah yes & just to clarify, our extension still has to go through the signing & review process at Mozilla, including submitting source code occasionally for them to reproduce builds & validate + approve our extension. We just opted to distribute it ourselves rather than in the add-on store originally.

56kul t1_j8ee8gg wrote on February 13, 2023 at 6:23 PM

Wait, if you still need to verify it through Mozilla, doesn’t it mean that you’re already clear to host it through the add-on store?

DashlaneCaden t1_j8eeenv wrote on February 13, 2023 at 6:24 PM

I believe the biggest hurdle is how to migrate users best from our hosted extension to the add-on store version, so we can avoid having to deploy & maintain the distribution of both versions. Moving from an unlisted extension -> listed is not as seamless as you'd expect, as it would technically be a new / separate extension on the add-on store.