Spotify uses old dependecy that doesn't respect XDG basedir specification

[cirlo]

Spotify appears to be using an old version of NSS (Network Security Services) that clutters $HOME with a .pki folder. That happens because up until version 3.42 (see: https://bugzilla.mozilla.org/show_bug.cgi?id=818686) NSS did not respect XDG base directory specifications. This should have been fixed for 3 years now.

Is there any way to prevent this from happening? Is it possible to use a newer version of the library?

It's very annoying having my base home directory filled with files & directories created by software that do not comply to almost two decade old standards

[jooon]

Spotify uses Chromium Embedded Framework for rendering. Seems like Chromium is not using the nss library in such a way that the bug fix made a difference.

Looks like it is Chromium code itself that creates the directory: https://github.com/chromium/chromium/blob/a3c9fac3931b0c645bf511a09b8954347a14eed2/crypto/nss_util.c...

There is also a bug report opened about the problem: https://bugs.chromium.org/p/chromium/issues/detail?id=1038587

[cirlo]

Thanks for the good finding. They even opened a merge request, but it seems it's stalled. OOF

Let's start by starring the issue so that,perhaps, it gets more visibility...