On Tuesday 17 July 2007, Scott wrote: > I already sign my XPI's with a SSL cert. I followed > http://www.mozdevgroup.com/docs/pete/Signing-an-XPI.html to do this. > > Will I be required to stop doing that and use gpg then ? I figured a SSL > cert was much better.
GPG and SSL can provide similar utilities here; the signing of a package. My understanding right now is that you'll be signing the updates.rdf file to prove that the original developer is the same one pushing the update. It will be very similar to the process you're currently using to sign your XPIs. -Doug
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ Project_owners mailing list [email protected] http://mozdev.org/mailman/listinfo/project_owners
