its not necessary to sign non-privileged packaged apps (though Marketplace does), but use of 'origin' does require a privileged or higher type app, even if no privileged APIs are used.

(long) bug here that details the implementation rationale: https://bugzilla.mozilla.org/show_bug.cgi?id=852720

Andrew Williamson
Addons Technical Editor @ Addons.Mozilla.Org

On 05/08/2013 19:39, Benjamin Smedberg wrote:
On 8/5/2013 2:32 PM, Andrew Williamson wrote:

Since webapps can be hosted on any server, who gets to control the
origin listed in the app manifest?

The origin manifest property is only available to privileged apps (so
packaged).  Hosted need not apply.
I'm sorry, I was unclear. I mean an unprivileged packaged application
that is served from my own server, not the mozilla app store.

Is it necessary to sign for a packaged application that doesn't need
special privileges?

--BDS

_______________________________________________
dev-webapps mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-webapps

Reply via email to