[Go Faster] Updating and installing new system add-ons

Ben Hearsum bhearsum at mozilla.com
Tue Sep 8 16:35:35 UTC 2015


Fine with me as long as the security folks are good with it. Worth noting that we include both hashes plus mar signatures for Gecko updates, though that may simply be because we didn't used to have signed mars...

On Tue, Sep 08, 2015 at 09:27:51AM -0700, Dave Townsend wrote:
> I was making the assumption that since system add-ons will be signed the
> hashes may not be necessary, but that's easy to include if needed.
> 
> On Tue, Sep 8, 2015 at 9:22 AM, Ben Hearsum <bhearsum at mozilla.com> wrote:
> 
> > We'll need hashes+filesizes here for verification purposes too, but that's
> > just a minor detail.
> >
> > On Tue, Sep 08, 2015 at 09:12:43AM -0700, Dave Townsend wrote:
> > > After discussions with Ben I've updated the section of the client plan on
> > > how we update system add-ons:
> > >
> > https://wiki.mozilla.org/Firefox/Go_Faster/Client_Implementation_Plan#Discovering_system_add-ons
> > >
> > > It shows the actual server response we will be reading and is essentially
> > > the same update mechanism that GMP uses.
> >
> > > _______________________________________________
> > > Gofaster mailing list
> > > Gofaster at mozilla.org
> > > https://mail.mozilla.org/listinfo/gofaster
> >
> >

> _______________________________________________
> Gofaster mailing list
> Gofaster at mozilla.org
> https://mail.mozilla.org/listinfo/gofaster

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://mail.mozilla.org/pipermail/gofaster/attachments/20150908/4de1dde6/attachment-0001.sig>


More information about the Gofaster mailing list