[Project_owners] newbie question: how do secure updates for FF 3.0 work?

[Malte Kraus]

Godmar Back schrieb:
> I find it hard to believe that there's no way to grandfather existing
> projects into the new 3.0 framework  - I'm not asking for you to
> tolerate unsigned xpis, but at least a migration path should have been
> provided.  Is there really no migration path? (Note that we control
> the updateLink location. We could, conceivably, redirect those to a
> https URL. Would that help us?)
As far as I know, Firefox 3 allows one unsafe extension update right 
after the Firefox update.