[Project_owners] McCoy for extension signing

[Philip Chee]

On Tue, 18 Sep 2007 09:11:40 -0500, Christopher Finke wrote:

> On 9/18/07, Douglas E. Warner <silfreed at silfreed.net> wrote:
>> The tool to automate secure updates has finally been released:
>> http://developer.mozilla.org/en/docs/McCoy

> Is McCoy's methodology supported by any existing Firefox build?  I
> tried it out using an invalidly signed update.rdf, and neither FF2 nor
> FF3 (alpha 7) complained like they should have.

FF2 will just ignore the new metadata. Current Minefield nightlies will
complain. The next Gran Paradiso milestone (M8) will also complain.

Phil

-- 
Philip Chee <philip at aleytys.pc.my>, <philip.chee at gmail.com>
http://flashblock.mozdev.org/ http://xsidebar.mozdev.org
Guard us from the she-wolf and the wolf, and guard us from the thief,
oh Night, and so be good for us to pass.
[ ]Old musicians never die. They just decompose!
* TagZilla 0.066.6