Hacker News Reader

I think Tharkun is saying that there should be a (reasonably accessible) way for a user to choose to override the check's failure. Which is not that far-fetched as a proposal.

It's a classic and ongoing debate of "who knows best?" -- the vendor, or the end user?

Non sequitur. An installed addon could be signed with a certificate. Mozilla can push out a revocation for that certificate if it deems it appropriate. The revocation can pop up a modal telling users it wants to disable the addon. The user can click 'Disable addon' or 'Ignore (dangerous)'.

This doesn't need to be done through a dead man's switch (expiring certificate) that someone will forget to renew.

Yes.. the choice should be taken to the user- and the users choice should trump them all.

If you want full user choice about this you can use nightly or use a community packaged version with the option to disable the checks enabled or compile it yourself and enable the flag. It's not impossible to do that.