<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Hi Sebastian,<span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal>Regarding, <span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>“</span>So these efforts mean that newer versions will be declared as minor releases, so the burden for users of older versions to install them will be lowered?”<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>This is essentially correct though it will be an update to a single newer version (we will evaluate whether we should do this for Firefox 4, etc. with the affect this has) to Firefox 2.x through Firefox 3.6.x users and the extension compatibility check will not be performed.<span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>People with automatic updates turned off will only get the update if they manually check for updates.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Cheers,<o:p></o:p></p><p class=MsoNormal>Robert<span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><a name="_MailEndCompose"><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></a></p><p class=MsoNormal style='margin-left:.5in'><b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>From:</span></b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> Sebastian Zartner [mailto:sebastianzartner@gmail.com] <br><b>Sent:</b> Wednesday, April 23, 2014 11:28 PM<br><b>To:</b> Robert Strong<br><b>Cc:</b> firefox-dev@mozilla.org<br><b>Subject:</b> Re: Updating old versions of Firefox<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p><div><div><p class=MsoNormal style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:12.0pt;margin-left:.5in'>Just to understand the strategy right. So these efforts mean that newer versions will be declared as minor releases, so the burden for users of older versions to install them will be lowered? What will happen to people that have automatic updates turned off?<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>Sebastian <o:p></o:p></p></div></div><div><p class=MsoNormal style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:12.0pt;margin-left:.5in'><o:p> </o:p></p><div><p class=MsoNormal style='margin-left:.5in'>On 24 April 2014 00:05, Robert Strong <<a href="mailto:rstrong@mozilla.com" target="_blank">rstrong@mozilla.com</a>> wrote:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal style='margin-left:.5in'>If there are no objections I will start this effort after the Firefox 29 release.<br><br>Thanks,<br>Robert<o:p></o:p></p><div><div><p class=MsoNormal style='margin-left:.5in'><br><br>On 4/22/2014 3:25 AM, Robert Strong wrote:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal style='margin-left:.5in'>On 4/22/2014 2:39 AM, Gervase Markham wrote:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal style='margin-left:.5in'>On 22/04/14 09:26, Robert Strong wrote:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal style='margin-left:.5in'>We've been looking at different methods of getting people on older Firefox<br>versions to the latest supported version and would like to propose the<br>following bug.<o:p></o:p></p></blockquote><p class=MsoNormal style='margin-left:.5in'>Is it worth quickly summarising the number of major security holes that<br>people on old versions of Firefox are vulnerable to?<o:p></o:p></p></blockquote><p class=MsoNormal style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:12.0pt;margin-left:.5in'>I don't think it is necessary but perhaps.<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal style='margin-left:.5in'><br>I think that principled objections to this sort of thing would come from<br>a number of possible sources:<br><br>1) User choice. (But we don't really want to have "being pwned" as a<br>choice available to users.)<br><br>2) Principle of least surprise.<br><br>3) Possible breakage.<br><br>Can we obviate the last two by having a new first run screen which goes<br>something like this?<br><br><br>Surprised?<br><br>We've automatically updated your Firefox to a newer version. The version<br>you were running was very old, unsupported and had serious security<br>problems which could put your personal information and your computer at<br>risk.<br><br>[The version you've been updated to is not the newest, because we<br>couldn't be certain that the newest one could run on your computer. If<br>we find it can, we may upgrade it again.]<br><br>It's possible that some addons or extensions that you were using in<br>Firefox are no longer working due to this upgrade. If that's happened,<br>we are very sorry.<br><br>We've set up a special forum to help people with problems caused by<br>these upgrades - please go <here>.<br><br>We apologise for any inconvenience caused, and hope you understand tha<br>the security of you and our other valued users is our primary concern.<o:p></o:p></p></blockquote><p class=MsoNormal style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:12.0pt;margin-left:.5in'>There are definitely ways to accomplish this.<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal style='margin-left:.5in'>3. At the very least the systems I mentioned above can be updated to<br>Firefox 12 since its minimum supported Windows version is Win2K.<o:p></o:p></p></blockquote><p class=MsoNormal style='margin-left:.5in'>Can we roll a special build of 12 with extra reporting and telemetry so<br>we can tell if users can be updated further?<o:p></o:p></p></blockquote><p class=MsoNormal style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:12.0pt;margin-left:.5in'>It shouldn't be necessary since the aus ping will include this info in 12.<br><br>Robert<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal style='margin-left:.5in'><br>Gerv<o:p></o:p></p></blockquote><p class=MsoNormal style='margin-left:.5in'><br>_______________________________________________<br>firefox-dev mailing list<br><a href="mailto:firefox-dev@mozilla.org" target="_blank">firefox-dev@mozilla.org</a><br><a href="https://mail.mozilla.org/listinfo/firefox-dev" target="_blank">https://mail.mozilla.org/listinfo/firefox-dev</a><o:p></o:p></p></blockquote><p class=MsoNormal style='margin-left:.5in'><br>_______________________________________________<br>firefox-dev mailing list<br><a href="mailto:firefox-dev@mozilla.org" target="_blank">firefox-dev@mozilla.org</a><br><a href="https://mail.mozilla.org/listinfo/firefox-dev" target="_blank">https://mail.mozilla.org/listinfo/firefox-dev</a><o:p></o:p></p></div></div></blockquote></div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div></div></body></html>