On Thu, Mar 15, 2012 at 12:51 AM, David Chan <dc...@mozilla.com> wrote: > Ignore my other email. I sent too early
*eyes shut*.... >> > The >> > selfhost issue Jonas brought up doesn't seem to apply if the >> > packages >> > are signed. >> >> self-host... selfhost... i'm lost. sorry. do you have a reference >> (wiki URL) which explains? >> > > The situation is more complicated than I remember. See > http://groups.google.com/group/mozilla.dev.b2g/msg/b079d34ccdec0f85 > > The part about SMSMessageInc. The scenario is that we have an > untrusted store attempting to sell an app which is hosted on a > trusted store. ok just for now so it's not forgotten i've added it to https://wiki.mozilla.org/Apps/Security#Other_.28topics_that_don.27t_fall_into_above_proposals.29 l. _______________________________________________ dev-security mailing list dev-security@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security
