Re: Security use cases for packaging

[Yan Zhu]

chris palmer wrote:

> But other code from the same origin might not be signed, which could
> break the security assertion of code signing.


Maybe the code from the downloaded package has to be run from a local origin 
like chrome://*.