Monday, December 7, 2009

Firefox Add-ons Distribution

So I was trying to put up a new version of my product, Wasp, this weekend and because in order to use the automatic distribution from the mozilla.org web site you need to go trough a long approval process before the add-ons goes live and because I decided to give everybody a nice Christmas present in version 1.30, I wanted to release the new software with using my own web site.

After reviewing the 2 options, I decided to use a non secure http server but when you do this, you need to sign your product with a digital certificate in order to prevent "man in the middle" attack on you software. Obviously in order to make sure the certificate is valid in your updated product, you need to also sign your previous version, the one on the mozilla web site, but in order to do this, I need to resubmit my new version to the approval process again. No quick fix I guess...

So my other option is to find an https server in order to push out my new release quickly, you will need to wait another 24 hours I guess