We only want to sign extensions, not all the files that have a ".xpi" extension. For example, complete themes also use the ".xpi" extension, but shouldn't be signed. STR: 1/ submit a complete theme 2/ grant it a review (full or preliminary) 3/ download the file, unzip it 4/ verify that it's signed (but it shouldn't): there's the three files zigbert.sf, zigbert.rsa and manifest.mf in the META-INF folder
Assignee: nobody → mathieu
Status: NEW → RESOLVED
Last Resolved: 3 years ago
Resolution: --- → FIXED
Product: addons.mozilla.org → addons.mozilla.org Graveyard
You need to log in before you can comment on or make changes to this bug.