So... They use the browser's UA to "detect" what version of NSS is used, and once their reference distro updates to the correct version of NSS, they'll whitelist the useragent string ? This is completely broken, there's no relationship between the UA string and the version of NSS.
Pushing for for majors distros to ship the required version of NSS is a good thing, but using UA whitelisting like this is a big WTF.
Pushing for for majors distros to ship the required version of NSS is a good thing, but using UA whitelisting like this is a big WTF.
Comment