[Go Faster] Default system add-ons and signing

Ben Hearsum bhearsum at mozilla.com
Mon Sep 21 15:28:12 UTC 2015


On Fri, Sep 18, 2015 at 10:18:06PM -0400, Mike Connor wrote:
> I'm not sure what you mean by " None of the rest of the Firefox code is
> signed so I don't know that we need to sign these other bits."
> 
> Every binary is signed, and I thought we signed omni.ja, but seemingly not
> (I consider this a problem).

We don't do any explicit signing of omni.ja. On Windows, all binaries (dlls/exes) are signed. On Mac, I'm pretty sure everything is protected by the .app-level seal - so omni.ja is protected by that. On Linux, nothing is signed.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://mail.mozilla.org/pipermail/gofaster/attachments/20150921/7c1e2a78/attachment.sig>


More information about the Gofaster mailing list