On 2008-05-28 20:19:55 +1000, Marcos Caceres wrote: > > This goes back full-circle to the question whether the > > metainformation (including signature and capabilities) should be > > within the zip archive, or in a separate outside file.
> > My gut feeling is that the update descriptor is going to end up > > looking *very* similar to the manifest, in the end of the day. > I disagree. There is only a tiny bit of overlap that is needed to do > the version and ID comparison. I was referring to Arve's remark about the security related capabilities, and about doing a user interaction about these *before* the full widget is downloaded. That would imply moving more information into the detached file. -- Thomas Roessler, W3C <[EMAIL PROTECTED]>
