20 Years of Firefox Code Signing: From Manual to Automated

This article chronicles the evolution of Firefox code signing at Mozilla over the past 20 years. Initially, the process was incredibly manual, requiring physical machines, USB keys, and extensive hand-crafted steps. Through technological advancements, Mozilla automated signing, moving from improved scripts to dedicated signing servers, and finally adopting Taskcluster and the Autograph service. Today, Firefox code signing happens thousands of times a day, significantly enhancing software security.