Re: Deskbar Applet, NewStuffManager, 2.16, Installing New Plug-Ins, AutoUpdate, etc.

[Mike Hearn <mike plan99 net>]

On Wed, 02 Aug 2006 10:45:23 +1000, Nigel Tao wrote:
> This code
> looked good at the time it was added to the master list, but in the
> mean time, the domain registration for some.web.site expired and a
> villian has picked it up, and now serves up evil spyware versions of
> the extension to our poor user.  Bad.

Is it really that hard to check a digital signature? I'd have thought
there'd be APIs in Python/C/Mono that make this trivial by now. And that's
all you have to do to protect against the "files are changed by evil
people" case.

thanks -mike