[Project_owners] Security_Concerns

[Eric H. Jung]

> No, but all e-mails with attachments are trashed, so I will have to
> look 
> into this later today and get back to you (out of band).

That is too bad.

> The generated md5 or sha1 values needs to be stored in install.rdf
> like 
> this (which is basically the same example as the link I provided):
> 
> <em:updateHash>
>    sha1:c4e27e3819ec8e2ed732aaaea2531440a8694542
> </em:updateHash>

Neither the above example nor the link you sent explain where in the
install.rdf DOM <em:updateHash/> should appear. Should it appear as a
child of <RDF:Description/>, child of document.documentElement, or
somewhere else???