NS6 doesn't verify signatures on .xpi files yet. It was considered to be
of minimal utility because very few vendors outside of Netscape ever
bothered to sign them. I'm lobbying for the return of this feature but
we'll see. For the time being, there's no way to avoid the scary warning.
-Mitch Stoltz
Jeff Pudwell wrote:
> I have an xpi file that contains a plugin and support files that
> needs to be installed for Netscape 6. I signed this xpi in the same
> way I did for Netscape 4.x using the signtool but when the xpi
> is installed Netscape 6 does not display our certificate, instead
> it presents a dialog warning about installation of malicious software.
>
> Has anyone managed to sign their xpi file and do I have to do
> something differently?
>
> Thanks,
> Jeff