Re: Extension security?

[Pauli Virtanen <pav iki fi>]

13.12.2011 02:31, Jonathan Wilkes kirjoitti:
> So are all reviewed extensions signed with a key that is not kept on a public system, as Alan Cox proposed?  I couldn't tell from the "About" page, nor from the discussions referenced in above responses.

There does not seem to be additional signature checks on the client
side, apart from relying on the https certificate for the whole site:

http://git.gnome.org/browse/gnome-shell/tree/js/ui/extensionSystem.js