[Project_owners] InstallTrigger (was: XPI install still vulnerable to MITM attacks on mozdev.org)

eric.jung at yahoo.com eric.jung at yahoo.com
Fri Jul 20 10:06:45 PDT 2007


Yeah, I understand. If anything, promoting the use of InstallTrigger on mozdev without a file release system would only serve to get people to deliver their XPIs outside of the mirror system (i.e., linked from a regular HTML or PHP project page under their own control).


----- Original Message ----
From: "Michael Vincent van Rantwijk, MultiZilla" <mv_van_rantwijk at yahoo.com>
To: project_owners at mozdev.org
Sent: Friday, July 20, 2007 1:46:21 AM
Subject: Re: [Project_owners] InstallTrigger (was: XPI install still vulnerable to MITM attacks on mozdev.org)

eric.jung at yahoo.com wrote:
> There's great documentation on InstallTrigger here:
> http://developer.mozilla.org/en/docs/Installing_Extensions_and_Themes_From_Web_Pages
> Short of implementing a file release system like SourceForge, I'm not sure how mozdev could enforce each project-owner into publishing their download page with InstallTrigger.
> 
> Eric

We already use InstallTrigger() and dad asked Pete for help because we 
can't get to the XPI's without help from you guys!

-- 
Michael Vincent van Rantwijk
- MultiZilla Project Team Lead
- XUL Boot Camp Staff member
- iPhone Application Developer

_______________________________________________
Project_owners mailing list
Project_owners at mozdev.org
http://mozdev.org/mailman/listinfo/project_owners




-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mozdev.org/pipermail/project_owners/attachments/20070720/bdb550ab/attachment.html 


More information about the Project_owners mailing list