[Project_owners] Online version of McCoy

[Andrew Archer]

Eric H. Jung wrote:
> I don't know, but the point is mozdev should have an upload tool which preps XPIs for
> auto-updating when update.rdf isn't hosted at AMO (it's probably hosted at mozdev, but not
> necessarily). I believe updateHash is the only install.rdf entry required for this. updateKey,
> updateLink are not required. Anyone confirm?
>
>   


As I understand it for secure update to work the extension will need the 
following entry in the install.rdf file
<em:updateKey> = This is the public key, it's used to verify the 
update.rdf signature
 

 The update.rdf will need
 <em:updateHash>  = Fingerprint of the xpi file
 <em:signature>      = This is signed hash of the install.rdf file,  
this must be created using the private key