McCoy is a simple XULRunner based application that enabled add-on authors to provide secure updates to their users. Specifically if focuses on the process of digitally signing update manifests so the client applications can verify the integrity of a manifest retrieved over normally insecure channels.

Source Code

McCoy is available from Mozilla's Subversion repository. You can check out the latest trunk version using the command:

 svn co http://svn.mozilla.org/projects/mccoy/trunk mccoy

You can also browse the source.

Read about how to build McCoy.