Quote from: marcus_of_augustus on June 16, 2013, 06:28:28 AM

This looks like a really useful tool ... there are some concerns on the #namecoin irc

Quote

[16:39] http://namecoin.com/
[16:42] randy-waterhouse: do you know if the source code for the namecoin.com Firefox/Chrome plugin is posted anywhere?
[16:42] d'oh.. whenever i looked up namecoin i got redirected to the dotbit website
[16:42] extensions are already open source aren't they?
[16:42] echelon: not necessarily, extensions can be obfuscated
[16:44] Jeremy_Rand: good point, caution advised
[16:44] hopefully namecoin.bit guy will post eventually
[16:44] maybe waiting for first mover advantage to cement itself?
[16:45] anyone know who is behiind namecoin.com ??
[16:46] apparently this guy.. http://www.maayainfotech.com/
[16:49] interesting
[16:49] the extension is not obfuscated
[16:49] and it seems to retrieve this proxy auto-config file
[16:49] http://namecoin.com/extension/proxy.pac
[16:49] so the extension won't work if the domain is down
[16:49] and they could change it later on
[16:49] to do something more malicious
[16:49] ok, so the .pac file is hosted on a non-HTTPS domain
[16:49] yeah
[16:50] wonderful, so even if the operator is legit, some random guy on your network can install whatever pac file he wants onto your browser
[16:50] i dunno why they have to retrieve from the website anyway
[16:50] it could've been packaged with the extension
[16:50] yeah, suspicious

Source code will be uploaded on github soon, been meaning to do that. I understand the concerns, and this is something that needs to be open source.