FirefoxOS/New security model/Packaging: Difference between revisions

FirefoxOS/New security model/Packaging (view source)

2 bytes added , 22 July 2015

canmove, Confirmed users

1,220

edits

@@ Line 42: / Line 42: @@
 == The Signed Manifest ==
-A packaged is denoted by setting two packages headers. The first points to the manifest for the package (contains a list of files and digests of these files) and a signature of manifest content in JWS format:
+A packaged is denoted by setting a single packages header which is the signature over the first resource which MUST be the manifest, and must include a list of resources in the package, along with their hashes.
     '''manifest-signature: MRjdkly.... (Base64 JWS Signature over manifest content)'''