[Project_owners] Security_Concerns

Matthew Wilson matthew at mjwilson.demon.co.uk
Mon Jun 4 12:07:25 PDT 2007


Michael Vincent van Rantwijk wrote:
> Eric H. Jung wrote:
>> http://bugzilla.mozdev.org/show_bug.cgi?id=6667 although it hasn't been
>> updated with the latest status from the sysadmins.
> 
> Perfect, thanks.
> 
>> Michael, did you get the ant task I sent you? You never replied. 
> 
> No, but all e-mails with attachments are trashed, so I will have to look 
> into this later today and get back to you (out of band).
> 
>> I need
>> an answer to my question as to where the <em:hash/> element (or
>> whatever it was called) goes in the install.rdf DOM.
> 
> The generated md5 or sha1 values needs to be stored in install.rdf like 
> this (which is basically the same example as the link I provided):
> 
> <em:updateHash>
>    sha1:c4e27e3819ec8e2ed732aaaea2531440a8694542
> </em:updateHash>

You might as well use something stronger than SHA-1. I use SHA-256.

Matthew


More information about the Project_owners mailing list