WebExtensions, Certificate Overrides, and HPKP Pins

Hi,

Are there any plans to allow a WebExtensions add-on to read and write to the list of certificate overrides and HPKP pins? In current Firefox, these are handled by nsICertOverrideService and nsISiteSecurityService respectively. My understanding is that directly accessing these services is not doable in WebExtensions, meaning that add-ons using these services will break in future Firefox releases (if that understanding is incorrect, please let me know). These are very useful services for add-ons that offer custom trust systems for TLS certificates (e.g. things like Convergence), and it would be very unfortunate if this functionality were lost in the switch to WebExtensions.

Thanks,
-Jeremy Rand

I don’t think it’s clear now which things will be allowed or not in WebExtensions. You can help by proposing APIs here.