1178527 - cache the signature check so that we dont need to recheck everytime

Status: RESOLVED WONTFIX

(Core :: Networking, defect, P1)

Description

[Paul Theriault [:pauljt] (no longer reading bugmail)]

We will want to cache the signature check on the new signed packages somehow, so that if the resource remains unchanged, that we do not need to verify the signature check each time.

Comment 1

[Paul Theriault [:pauljt] (no longer reading bugmail)]

Our process here will likely be to simply not cache signed resource if their integrity check fails, so if the content is in the cache we can be sure the content is unmodified. I'll leave open for Henry to close once this approach has been confirmed as valid.

Comment 2

[Henry Chang [:hchang]]

(In reply to Paul Theriault [:pauljt] from comment #1)
> Our process here will likely be to simply not cache signed resource if their
> integrity check fails, so if the content is in the cache we can be sure the
> content is unmodified. I'll leave open for Henry to close once this approach
> has been confirmed as valid.

Since the current packaged web content requesting flow has been changed, all the
packaged content request is managed by PackagedAppService, which means there's
no direct access to the packaged content cache. We can guarantee the cached file 
will not be used unexpectedly until we claim it's available. So, when the cached 
packaged resource is said available, it's guaranteed verified.

I'll close this bug at the moment and reopen it if the architecture changes.