<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Chris Ilias' Blog &#187; Mozilla Suite</title>
	<atom:link href="http://ilias.ca/blog/category/mozilla/mozilla-suite/feed/" rel="self" type="application/rss+xml" />
	<link>http://ilias.ca/blog</link>
	<description>I still dream of Organon</description>
	<lastBuildDate>Fri, 11 May 2012 16:22:16 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
		<item>
		<title>Tips on how to deal with disgruntled users</title>
		<link>http://ilias.ca/blog/2012/05/tips-on-how-to-deal-with-disgruntled-users/</link>
		<comments>http://ilias.ca/blog/2012/05/tips-on-how-to-deal-with-disgruntled-users/#comments</comments>
		<pubDate>Fri, 11 May 2012 16:22:16 +0000</pubDate>
		<dc:creator>Chris Ilias</dc:creator>
				<category><![CDATA[Firefox]]></category>
		<category><![CDATA[Mozilla]]></category>
		<category><![CDATA[Mozilla Suite]]></category>
		<category><![CDATA[SeaMonkey]]></category>
		<category><![CDATA[Thunderbird]]></category>

		<guid isPermaLink="false">http://ilias.ca/blog/?p=566</guid>
		<description><![CDATA[This is something I&#8217;ve been wanting to write about for a while. In many community driven support venues, I see some bad patterns in the way users are treated. People who may be knowledgeable about Firefox end up giving bad user support, because they&#8217;re not being empathetic or approaching support with the intent of helping [...]]]></description>
			<content:encoded><![CDATA[<p>This is something I&#8217;ve been wanting to write about for a while. In many community driven support venues, I see some bad patterns in the way users are treated. People who may be knowledgeable about Firefox end up giving bad user support, because they&#8217;re not being empathetic or approaching support with the intent of helping users.</p>
<h3>Reasons for this?</h3>
<ul>
<li>Even with real names, many people behave less empathetic on the internet. It&#8217;s too easy to forget that the person you are talking to is a real human.</li>
<li>The people helping are mostly volunteers, who don&#8217;t feel obligated to be nice, or represent Mozilla.</li>
<li>Also with volunteers, many are involved in support simply because they know the technical solution to some issues, and have no formal training in support.</li>
</ul>
<p>Those factors tend to create a community of geeks lacking the social skills to help novice users. Most people in the community just haven&#8217;t considered this. If a fellow user is being uncivil, it&#8217;s natural to flame back.</p>
<h3>It&#8217;s important to remember:</h3>
<ul>
<li><strong>Empathy</strong>: If you have a problem with your cable, and call your cable company tech support, how would you like to be treated? They would never say &#8220;<em>PEBCAK</em>&#8221; or &#8220;<em>RTFM</em>&#8220;.</li>
<li>The user is having a problem with Firefox, and it&#8217;s obviously of some importance to them, because they made the effort to find the support venue, register, and post about it. If they&#8217;ve gone that extent, <strong>we should expect a level of frustration</strong>. It would be nice if most users posting in a support forum were calm and civil, but that&#8217;s not the nature of the beast.</li>
</ul>
<p>I&#8217;m not saying the customer is always right; I&#8217;m saying don&#8217;t argue with them. Here are some tips everyone can use when giving technical support:</p>
<ul>
<li><strong>Remind yourself of your purpose there. It should be to help others</strong>, not to show off your knowledge of Firefox. Don&#8217;t expect to be treated like royalty by users, just because you&#8217;re helping them. &#8220;Don&#8217;t bite the hand that feeds you&#8221; does not fly with software users. If you don&#8217;t think you&#8217;re getting enough appreciation, let it be known to the forum manager, not the user.</li>
<li><strong>Packaging, packaging, packaging!</strong> Almost any criticism of the user can be phrased in a way that appears helpful rather than confrontational. If your mind says &#8220;<em>How in the world am I supposed to help you, when you provide no details and no URL? I&#8217;m not a mind-reader</em>&#8220;, then say &#8220;<em>We&#8217;ll need some more info about your Firefox setup. Here are the details we need and how to provide them…</em>&#8221; There&#8217;s a big difference between telling a user he/she should have searched the web before posting, and letting them know that they can search the web before posting.</li>
<li><strong>You can calm a user down by explaining things.</strong> Frustration comes from lack of understanding. A couple of years ago, I went to see my dentist about a pain I was having. He showed me an x-ray of my tooth, explained what the problem was and why it was happening. He then told me what he planned to do to fix the problem, warned me of any side-effects, and told me how much it would cost. I walked out of there feeling much more confident and relaxed about the situation. I also thought &#8220;<em>So much of that applies to user support</em>&#8220;. Instead of simply giving the user instructions on how to fix a problem, explain what you think the cause of the problem probably is, and what the solution is. Then tell them how to carry out the solution.</li>
<li><strong>If you&#8217;re not having the same problem as the user, say so.</strong> It doesn&#8217;t directly help the user, but it shows that you&#8217;re making an effort to help, which the user will appreciate. It shows that the problem may not be a bug, which will discourage other users from chiming in just to rant about the product. It encourages people to give details, which a good user support person loves like crack.</li>
<li><strong>Act as if you are talking to the user in-person.</strong></li>
<li><strong>Don&#8217;t get hung up on protocol.</strong> This is something I see a lot of in newsgroups. If the user starts a new thread to respond to your reply in the original thread, or puts the entire question in the subject and nothing in the message body, mention it, but don&#8217;t focus on it. That takes focus away from the issue they posted about. Better yet, don&#8217;t mention it at all until after you&#8217;ve solved their problem. At that point, they will have gained some respect for what you have to say.</li>
<li>I<strong>f the user just wants to argue, disengage.</strong> Some users just want to rant. It&#8217;s good to offer to help and direct them where to submit feedback, but if you&#8217;ve already done that and they continue to rant, leave it alone.</li>
</ul>
<p>Quantity vs quality is hard. With SUMO focusing on making sure every question gets answered, making those answers better quality can take time away from another user getting any answer at all. One good way to solve that is snippets that provide good detailed explanations, instructions, and links. Right now, you can use an extension called <a href="https://addons.mozilla.org/firefox/addon/clippings/" target="_blank">Clippings</a>, which allows you to automatically paste canned responses you&#8217;ve saved. It works on both Firefox and Thunderbird, so you can use it on web-forums as well as mailing lists and newsgroups. You can find a list of canned responses to use on the <a href="https://wiki.mozilla.org/Support/Forum/Snippets" target="_blank">Mozilla wiki</a>. Soon the SUMO support forum will have canned responses built in.</p>
<h3>What should Mozilla do when a volunteer is not being empathetic?</h3>
<p>That&#8217;s a natural extension to the above issue. I have some scattered thoughts on that. I still need to organize them, and will probably start a thread in the SUMO community forum to discuss.</p>
<p>If you&#8217;ve made it this far into this blog post, thanks for reading.</p>
]]></content:encoded>
			<wfw:commentRss>http://ilias.ca/blog/2012/05/tips-on-how-to-deal-with-disgruntled-users/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>When all you want to know is if the bug is fixed</title>
		<link>http://ilias.ca/blog/2011/06/when-all-you-want-to-know-is-if-the-bug-is-fixed/</link>
		<comments>http://ilias.ca/blog/2011/06/when-all-you-want-to-know-is-if-the-bug-is-fixed/#comments</comments>
		<pubDate>Fri, 17 Jun 2011 19:28:17 +0000</pubDate>
		<dc:creator>Chris Ilias</dc:creator>
				<category><![CDATA[Firefox]]></category>
		<category><![CDATA[Mozilla]]></category>
		<category><![CDATA[Mozilla Suite]]></category>
		<category><![CDATA[SeaMonkey]]></category>
		<category><![CDATA[Thunderbird]]></category>

		<guid isPermaLink="false">http://ilias.ca/blog/?p=517</guid>
		<description><![CDATA[For some specific bugs, I&#8217;ve added myself to the CC list, because I&#8217;m interested in knowing when the bug is fixed (and maybe when the target has changed). Problem is: because there has been a lot of discussion in a few of those bugs, I&#8217;ve been getting a lot of bugmail that I&#8217;m not interested [...]]]></description>
			<content:encoded><![CDATA[<p>For some specific bugs, I&#8217;ve added myself to the CC list, because I&#8217;m interested in knowing when the bug is fixed (and maybe when the target has changed). Problem is: because there has been a lot of discussion in a few of those bugs, I&#8217;ve been getting a lot of bugmail that I&#8217;m not interested in. I don&#8217;t want to remove myself from the CC list, because I still want to be notified when the bug is fixed.</p>
<p>I don&#8217;t know if I&#8217;m the only one with this issue, so I thought I&#8217;d share how I fixed it.</p>
<p>In my Bugzilla Preferences, there is an <a href="https://bugzilla.mozilla.org/userprefs.cgi?tab=email">Email Preferences tab</a> that allows me to choose what changes I get emailed about based on my relationship to the bug. In it, I turned off most options for when I am a voter of a bug. Then, for any bugs in which I only care if the bug is fixed, I vote for it instead of adding myself to the CC list.</p>
<p>I made that change over a week ago. So far, so good.</p>
]]></content:encoded>
			<wfw:commentRss>http://ilias.ca/blog/2011/06/when-all-you-want-to-know-is-if-the-bug-is-fixed/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Firefox product placements</title>
		<link>http://ilias.ca/blog/2008/10/firefox-product-placements/</link>
		<comments>http://ilias.ca/blog/2008/10/firefox-product-placements/#comments</comments>
		<pubDate>Sun, 05 Oct 2008 21:36:37 +0000</pubDate>
		<dc:creator>Chris Ilias</dc:creator>
				<category><![CDATA[Firefox]]></category>
		<category><![CDATA[Mozilla]]></category>
		<category><![CDATA[Mozilla Suite]]></category>

		<guid isPermaLink="false">http://ilias.ca/blog/?p=262</guid>
		<description><![CDATA[Over the past few years, I&#8217;ve noticed that I&#8217;ve developed a habbit: Whenever I see a browser in the media, be it television shows, commercials, screenshots on web sites, I automatically check to see what browser and OS is being used. Very often, Firefox is the browser being used. Today, on CNN.com, I saw another [...]]]></description>
			<content:encoded><![CDATA[<p>Over the past few years, I&#8217;ve noticed that I&#8217;ve developed a habbit: Whenever I see a browser in the media, be it television shows, commercials, screenshots on web sites, I automatically check to see what browser and OS is being used.</p>
<p>Very often, Firefox is the browser being used. Today, on CNN.com, I saw another instance.</p>
<p><img class="alignnone" style="border: 1px solid black;" title="Firefox on CNN" src="http://images.ilias.ca/firefoxoncnnsite.png" alt="" width="301" height="602" /></p>
<p>It&#8217;s a little hard to tell, but there&#8217;s a Firefox icon in the bottom left of the dock, the tab has a favicon, and the search bar has a favicon. Ergo, that&#8217;s Firefox, not Safari. CNN used to use Netscape 7 in their screenshots. (Although, that could have been because of the AOL-Time Warner umbrella.)</p>
<p>Years ago, the Mozilla Suite was on the Simpsons:</p>
<p><img class="alignnone" title="Mozilla on the Simpsons" src="http://images.ilias.ca/mozilla-the_simpsons_s15e21.jpg" alt="" width="512" height="384" /></p>
<p>If it hasn&#8217;t already been started, it would be cool if we had a log of all instances Firefox has appeared in the media.</p>
]]></content:encoded>
			<wfw:commentRss>http://ilias.ca/blog/2008/10/firefox-product-placements/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Mozilla Application Suite upgrade path</title>
		<link>http://ilias.ca/blog/2007/03/mozilla-application-suite-upgrade-path/</link>
		<comments>http://ilias.ca/blog/2007/03/mozilla-application-suite-upgrade-path/#comments</comments>
		<pubDate>Fri, 09 Mar 2007 05:35:28 +0000</pubDate>
		<dc:creator>Chris Ilias</dc:creator>
				<category><![CDATA[Mozilla]]></category>
		<category><![CDATA[Mozilla Suite]]></category>

		<guid isPermaLink="false">http://ilias.ca/blog/2007/03/mozilla-application-suite-upgrade-path/</guid>
		<description><![CDATA[{democracy:2} (I purposely left out a &#8216;both&#8217; option. )]]></description>
			<content:encoded><![CDATA[<div>{democracy:2}</div>
<p>(I purposely left out a &#8216;both&#8217; option. <img src='http://ilias.ca/blog/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' />  )</p>
]]></content:encoded>
			<wfw:commentRss>http://ilias.ca/blog/2007/03/mozilla-application-suite-upgrade-path/feed/</wfw:commentRss>
		<slash:comments>11</slash:comments>
		</item>
		<item>
		<title>Gecko is Gecko</title>
		<link>http://ilias.ca/blog/2006/10/gecko-is-gecko/</link>
		<comments>http://ilias.ca/blog/2006/10/gecko-is-gecko/#comments</comments>
		<pubDate>Fri, 27 Oct 2006 20:36:10 +0000</pubDate>
		<dc:creator>Chris Ilias</dc:creator>
				<category><![CDATA[Mozilla]]></category>
		<category><![CDATA[Mozilla Suite]]></category>
		<category><![CDATA[Netscape]]></category>
		<category><![CDATA[SeaMonkey]]></category>

		<guid isPermaLink="false">http://ilias.ca/blog/2006/10/gecko-is-gecko/</guid>
		<description><![CDATA[I just read a post by Robert Kaiser in mozilla.dev.general, that contains a great link: http://www.geckoisgecko.org/ I see it as something like www.googleityoumoron.com, but for web developers. It might be useful for users of Mozilla-based browsers, other than Firefox. The Mozilla Developer Center also has a good article on Browser Detection and Cross Browser Support, [...]]]></description>
			<content:encoded><![CDATA[<p>I just read a post by <a href="http://www.kairo.at/">Robert Kaiser</a> in <a href="http://ilias.ca/blog/2006/01/instructions-for-new-newsgroup-server/">mozilla.dev.general</a>, that contains a great link:</p>
<p><a href="http://www.geckoisgecko.org/">http://www.geckoisgecko.org/</a></p>
<p>I see it as something like <a href="http://www.googleityoumoron.com/">www.googleityoumoron.com</a>, but for web developers. It might be useful for users of Mozilla-based browsers, other than Firefox.</p>
<p>The Mozilla Developer Center also has a good article on <a href="http://developer.mozilla.org/en/docs/Browser_Detection_and_Cross_Browser_Support">Browser Detection and Cross Browser Support</a>, if you come across a website, that is too specific in its browser sniffing.</p>
<p><a href="http://www.anybrowser.org/campaign/">Someday&#8230;</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://ilias.ca/blog/2006/10/gecko-is-gecko/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Removing &#8216;Remove All&#8217;</title>
		<link>http://ilias.ca/blog/2006/04/removing-remove-all/</link>
		<comments>http://ilias.ca/blog/2006/04/removing-remove-all/#comments</comments>
		<pubDate>Wed, 19 Apr 2006 05:40:00 +0000</pubDate>
		<dc:creator>Chris Ilias</dc:creator>
				<category><![CDATA[Firefox]]></category>
		<category><![CDATA[Mozilla]]></category>
		<category><![CDATA[Mozilla Suite]]></category>
		<category><![CDATA[SeaMonkey]]></category>
		<category><![CDATA[Thunderbird]]></category>

		<guid isPermaLink="false">http://ilias.ca/blog/?p=87</guid>
		<description><![CDATA[Here&#8217;s a question: Using any of Firefox, Thunderbird, SeaMonkey, the Mozilla Suite, or Netscape, have you ever purposely clicked on the &#8216;Remove All&#8217; button, in the password manager? Follow up question: Have you ever clicked on it by accident? Clicking on it by accident, is easy, when it sits right beside &#8216;Remove&#8217; button. Luckily, the [...]]]></description>
			<content:encoded><![CDATA[<p>Here&#8217;s a question: Using any of Firefox, Thunderbird, SeaMonkey, the Mozilla Suite, or Netscape, have you ever purposely clicked on the &#8216;Remove All&#8217; button, in the password manager?</p>
<p>Follow up question: Have you ever clicked on it by accident?</p>
<p>Clicking on it by accident, is easy, when it sits right beside &#8216;Remove&#8217; button. Luckily, the closest I&#8217;ve come to that, is removing all cookies, not passwords. The scary part is that there is no &#8220;<em>Are you sure</em>&#8221; prompt, asking for confirmation. One accidental click, and &#8216;poof&#8217;, data is gone.</p>
<p>I&#8217;ve been able to avoid this by removing the &#8216;Remove All&#8217; button. If you&#8217;re using Firefox or Thunderbird, add the following script to your <a href="http://www.mozilla.org/support/firefox/edit">userChrome.css</a> file, to remove the &#8216;Remove All&#8217; button from the password manager:</p>
<p><code style="font-weight: bold; color: #333399">#removeAllSignons {display: none !important;}</code></p>
]]></content:encoded>
			<wfw:commentRss>http://ilias.ca/blog/2006/04/removing-remove-all/feed/</wfw:commentRss>
		<slash:comments>14</slash:comments>
		</item>
		<item>
		<title>Outlook and OE address book support in Thunderbird</title>
		<link>http://ilias.ca/blog/2006/03/outlook-and-oe-address-book-support-in-thunderbird/</link>
		<comments>http://ilias.ca/blog/2006/03/outlook-and-oe-address-book-support-in-thunderbird/#comments</comments>
		<pubDate>Thu, 02 Mar 2006 05:19:00 +0000</pubDate>
		<dc:creator>Chris Ilias</dc:creator>
				<category><![CDATA[Mozilla]]></category>
		<category><![CDATA[Mozilla Suite]]></category>
		<category><![CDATA[SeaMonkey]]></category>
		<category><![CDATA[Thunderbird]]></category>

		<guid isPermaLink="false">http://ilias.ca/blog/?p=80</guid>
		<description><![CDATA[Mozilla Thunderbird and SeaMonkey (and even the Mozilla Suite and Netscape 7) can actually be set up to use your Outlook Express address book, and/or your Outlook Contacts list. It&#8217;s just another one of those features that are not in the user interface. To make Thunderbird use your Outlook Express address book, close Thunderbird, and [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://www.getthunderbird.com/">Mozilla Thunderbird</a> and <a href="http://www.mozilla.org/projects/seamonkey/">SeaMonkey</a> (and even the <a href="http://ilias.ca/mozilla/mailnewsfaq/OEaddressbook.html">Mozilla Suite</a> and <a href="http://ilias.ca/netscape/mailnewsfaq/OEaddressbook.html">Netscape 7</a>) can actually be set up to use your Outlook Express address book, and/or your Outlook Contacts list. It&#8217;s just another one of those features that are not in the user interface.</p>
<p>To make Thunderbird use your Outlook Express address book, close Thunderbird, and add the following lines to your prefs.js file:<br />
<code style="font-weight: bold; color: #333399">user_pref("ldap_2.servers.OE.description", "Outlook Express");<br />
user_pref("ldap_2.servers.OE.dirType", 3);<br />
user_pref("ldap_2.servers.OE.uri", "moz-aboutlookdirectory://oe/");</code></p>
<p>For Outlook Contacts, use these lines:<br />
<code style="font-weight: bold; color: #333399"> user_pref("ldap_2.servers.Outlook.description", "Outlook");<br />
user_pref("ldap_2.servers.Outlook.dirType", 3);<br />
user_pref("ldap_2.servers.Outlook.uri", "moz-aboutlookdirectory://op/");</code></p>
<p>One important note: in order for it to work with Outlook, Outlook must be set as the system default mail client.</p>
<p>Interestingly enough, it appears this feature goes back to Mozilla 1.0.</p>
]]></content:encoded>
			<wfw:commentRss>http://ilias.ca/blog/2006/03/outlook-and-oe-address-book-support-in-thunderbird/feed/</wfw:commentRss>
		<slash:comments>48</slash:comments>
		</item>
		<item>
		<title>Browser and Mailnews FAQs Restructured</title>
		<link>http://ilias.ca/blog/2005/12/browser-and-mailnews-faqs-restructured/</link>
		<comments>http://ilias.ca/blog/2005/12/browser-and-mailnews-faqs-restructured/#comments</comments>
		<pubDate>Tue, 27 Dec 2005 08:06:00 +0000</pubDate>
		<dc:creator>Chris Ilias</dc:creator>
				<category><![CDATA[ilias.ca]]></category>
		<category><![CDATA[Mozilla Suite]]></category>
		<category><![CDATA[Netscape]]></category>

		<guid isPermaLink="false">http://ilias.ca/blog/?p=67</guid>
		<description><![CDATA[Well, I finally did it. A little while ago, I posted about my browser and mailnews FAQs being too big for one page, and that I was considering giving each FAQ item its own page. I contemplated using a content management system, but in the end decided to get rid of template content that I [...]]]></description>
			<content:encoded><![CDATA[<p>Well, I finally did it. A little while ago, <a href="http://ilias.ca/blog/2005/11/restructuring-my-website/">I posted</a> about my browser and mailnews <acronym title="Frequently Asked Question">FAQ</acronym>s being too big for one page, and that I was considering giving each <acronym title="Frequently Asked Question">FAQ</acronym> item its own page. I contemplated using a content management system, but in the end decided to get rid of template content that I might change, and do it all manually.</p>
<p>I&#8217;ve applied these changes to my <a href="http://ilias.ca/netscape/browserfaq/">Netscape 7 Browser FAQ</a>, <a href="http://ilias.ca/netscape/mailnewsfaq/">Netscape 7 Mailnews FAQ</a>, <a href="http://ilias.ca/mozilla/browserfaq/">Mozilla Browser FAQ</a>, and <a href="http://ilias.ca/mozilla/mailnewsfaq/">Mozilla Mailnews FAQ</a>; so if anyone references those pages, or if you have have a website that contains links to any of the items on those pages, be sure to update your links.</p>
]]></content:encoded>
			<wfw:commentRss>http://ilias.ca/blog/2005/12/browser-and-mailnews-faqs-restructured/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>XPI blocking whitelist in the Mozilla Application Suite</title>
		<link>http://ilias.ca/blog/2005/07/xpi-blocking-whitelist-in-the-mozilla-application-suite/</link>
		<comments>http://ilias.ca/blog/2005/07/xpi-blocking-whitelist-in-the-mozilla-application-suite/#comments</comments>
		<pubDate>Thu, 14 Jul 2005 06:04:00 +0000</pubDate>
		<dc:creator>Chris Ilias</dc:creator>
				<category><![CDATA[Mozilla]]></category>
		<category><![CDATA[Mozilla Suite]]></category>

		<guid isPermaLink="false">http://ilias.ca/blog/?p=31</guid>
		<description><![CDATA[Many people don&#8217;t know this, but the XPI blocking feature in Firefox is also in the Mozilla Application Suite, starting at version 1.7 and up. They just couldn&#8217;t get a user interface for it, on time for Mozilla 1.7. By default, the &#8220;Enable Software Installation&#8221; setting will not block anything. Simply unchecking it, will turn [...]]]></description>
			<content:encoded><![CDATA[<p><img src="http://images.ilias.ca/mozilla-37.png" alt="" /><br />
Many people don&#8217;t know this, but the <acronym title="Cross-Platform Installer">XPI</acronym> <a title="click to view screenshot" href="http://ilias.ca/screenshots/ff-xpipref.png">blocking feature in Firefox</a> is also in the <a href="http://www.mozilla.org/products/mozilla1.x/">Mozilla Application Suite</a>, starting at version 1.7 and up. They just couldn&#8217;t get a user interface for it, on time for Mozilla 1.7.</p>
<p>By default, the &#8220;<a title="click to view screenshot" href="http://ilias.ca/screenshots/moz-SoftwareinstallPref.png">Enable Software Installation</a>&#8221; setting will not block anything. Simply unchecking it, will turn <acronym title="Cross-Platform Installer">XPI</acronym> installing off all together.</p>
<p>To enable software installation, but but only for certain sites, you first need to enter <a href="http://ilias.ca/mozilla/customizing/">about:config</a> in the browser location bar, then search for the preference <span style="font-weight: bold; color: #333399;">xpinstall.whitelist.required</span>, and set it to true.<br />
By default, there is one site on the whitelist: <a href="https://addons.mozilla.org/">update.mozilla.org</a>. To add a site to the list, use about:config to look for the pref <span style="font-weight: bold; color: #333399;">xpinstall.whitelist.add</span>, double click on it (or right-click on it, and select &#8216;Modify&#8217;). Set the value to the domain you want to add. For example: ilias.ca</p>
<p>To remove an entry from the whilelist, you&#8217;ll have to close down Mozilla, go to your <a href="http://ilias.ca/mozilla/profilefaq/">profile folder</a>, and manually remove the entry from the file hostperm.1.</p>
<p>Related bugzilla items: <a title="UpdateEnabled check with permission manager (in effect block XPI installs from non-whitelisted sites)" href="http://mozillanews.org/bugzilla_warning.php3?id=240552">240552</a>, <a title="XPInstall Permission Manager UI" href="http://mozillanews.org/bugzilla_warning.php3?id=270170">270170</a>, <a title="Indicator/dialog for blocked XPIs" href="http://mozillanews.org/bugzilla_warning.php3?id=246131">246131</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://ilias.ca/blog/2005/07/xpi-blocking-whitelist-in-the-mozilla-application-suite/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Digitally signing newsgroup posts</title>
		<link>http://ilias.ca/blog/2005/06/digitally-signing-newsgroup-posts/</link>
		<comments>http://ilias.ca/blog/2005/06/digitally-signing-newsgroup-posts/#comments</comments>
		<pubDate>Thu, 09 Jun 2005 07:12:00 +0000</pubDate>
		<dc:creator>Chris Ilias</dc:creator>
				<category><![CDATA[Mozilla]]></category>
		<category><![CDATA[Mozilla Suite]]></category>
		<category><![CDATA[Netscape]]></category>
		<category><![CDATA[SeaMonkey]]></category>
		<category><![CDATA[Thunderbird]]></category>

		<guid isPermaLink="false">http://ilias.ca/blog/2005/06/digitally-signing-newsgroup-posts/</guid>
		<description><![CDATA[I recently did some testing of SMIME signed newsgroup messages. First, I guess I should state how I achieved it in Mozilla Thunderbird (also works in Mozilla Application Suite, and Netscape 7): First, set up one of your mail accounts to have a certificate for digital signing. Close Mozilla Thunderbird, and open your prefs.js file. [...]]]></description>
			<content:encoded><![CDATA[<p>I recently did some testing of <acronym title="Secure Multipurpose Internet Mail Extension">SMIME</acronym> signed newsgroup messages. First, I guess I should state how I achieved it in <a href="http://www.getthunderbird.com/">Mozilla Thunderbird</a> (also works in <a href="http://www.mozilla.org/products/mozilla1.x/">Mozilla Application Suite</a>, and <a href="http://ilias.ca/netscape/">Netscape 7</a>):<br />
First, set up one of your mail accounts to have a certificate for digital signing. Close Mozilla Thunderbird, and open your <strong>prefs.js</strong> file. The mail identity in which you added a certificate should have a couple of pref lines pertaining to digital signing. For instance, if it were id1, it would be:<br />
<code style="font-weight: bold; color: #333399">user_pref("mail.identity.id1.sign_mail", false);<br />
user_pref("mail.identity.id1.signing_cert_name", "certificate name here");</code></p>
<p>Copy and paste those lines to the id that pertains to your news account, and edit the id number on the pasted lines. So, if your news account is id6, you should have both:<br />
<code style="font-weight: bold; color: #333399">user_pref("mail.identity.id1.sign_mail", false);<br />
user_pref("mail.identity.id1.signing_cert_name", "certificate name here");</code></p>
<p>and<br />
<code style="font-weight: bold; color: #333399">user_pref("mail.identity.id6.sign_mail", false);<br />
user_pref("mail.identity.id6.signing_cert_name", "certificate name here");</code></p>
<p>(Note that if you want your messages to be automatically be signed, you can change the value of <span style="font-weight: bold; color: #333399;">mail.identity.id6.sign_mail</span> to true.)</p>
<p>Save and close the prefs.js, and start Thunderbird. Open a newsgroup, and click on &#8220;Write.&#8221; If you want to sign the message, you can go to <strong>Options -&gt; Security -&gt; Digitally Sign This Message</strong>.</p>
<p>Okay, now that we know how to do it, what happens when it&#8217;s done?</p>
<p><span style="text-decoration: underline;">Size</span><br />
The first message I tested contained a body of one word: &#8220;test&#8221;. That message was 4<acronym title="KiloByte">KB</acronym>. I got a certificate with lower encryption. The first was 2048bit, the second was 1024. The same test message with a 1024 bit key was 1<acronym title="KiloByte">KB</acronym> less in size (3<acronym title="KiloByte">KB</acronym>). Note that if you&#8217;re using the <a href="http://quimby.gnus.org/circus/face/">Face header</a>, that will also add another <acronym title="KiloByte">KB</acronym> to your message, so all in all, you could have a one word newsgroup post, that is 5<acronym title="KiloByte">KB</acronym> in size.</p>
<p><ins>Usenet</ins><br />
I did a few tests in <a href="http://groups-beta.google.com/group/netscape.public.test">netscape.public.test</a> to see if the messages would propagate, and how <a href="http://groups.google.com/">Google</a> will take and display them. Google didn&#8217;t take them. As a matter of fact, neither did <a href="http://www.giganews.com/">Giganews</a>. I had to use <a href="news://news.mozilla.org:119/netscape.public.test">news.mozilla.org</a> to post them. Unsigned replies to those tests showed up on both Google and Giganews, so I did some digging. The signed messages were sent with the content-type header:<br />
<strong>Content-Type: multipart/signed; protocol=&#8221;application/x-pkcs7-signature&#8221;; micalg=sha1; boundary=&#8221;&#8212;&#8212;&#8212;&#8212;ms090800060705060603050107&#8243;</strong><br />
Both Google and Giganews filter out messages with binary attachments in text groups. Google and Giganews are treating the signature as a binary attachment. To verify this, I tried to post a signed message to <a href="news://news.giganews.com:119/giganews.test.binary">giganews.test.binary</a>, and it worked. If you want to sign your newsgroup messages, expect them to be treated as binary attachments.</p>
<p><span style="text-decoration: underline;">Display</span><br />
Okay, the digital signatures are treated as binary attachments. How are other news clients going to display the message. What I have on my system is Thunderbird, Netscape7, Mozilla 1.7.8, Netscape Communicator 4.8, Opera 7.54, Outlook Express 6, and Xnews5.04. All, except Opera and Xnews, recognized the signature as such, and had special display for it (key, etc). Opera and Xnews just considered it an attachment and used the generic attachment display method.</p>
<p><strong><span style="text-decoration: underline;">Conclusion</span></strong><br />
If you&#8217;re posting on usenet, don&#8217;t bother. If you&#8217;re posting on a private server, make sure there&#8217;s a clear reason to digitally sign your messages, that is worth the extra 2<acronym title="KiloByte">KB</acronym>, and take note of the software others are using.</p>
]]></content:encoded>
			<wfw:commentRss>http://ilias.ca/blog/2005/06/digitally-signing-newsgroup-posts/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>

