On Wednesday 18 July 2007, Scott wrote: > My impression from Doug's email is that all update RDF files must be gpg > signed for FF3 in order to get updates to work. > > Correct me if I am wrong....
The "signing process" isn't well-defined yet. I don't believe it's going to be GPG; it will probably be some type of SSL. But yes, you will have to sign your updates.rdf file as well as your XPI (if you wish to continue doing both). I'm assuming you have a code-signing certificate? If that's the case, that's the best for initial installs, while the signing of the updates.rdf file ensures the updates process is secure as well. -Doug
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ Project_owners mailing list [email protected] http://mozdev.org/mailman/listinfo/project_owners
