985255 - Breakdown: Implement OpenH264 download

Status: VERIFIED FIXED

(Tracking Graveyard :: Firefox Operations, defect)

Description

[Maire Reavy [:mreavy]]

Implement the sequence for downloading the OpenH264 plugin (upon update or install), including signature verification, etc

Comment 1

[Eric Rescorla (:ekr)]

The behavior that's needed here is as follows:

- When Firefox is initially installed, it needs to download OpenH264 immediately.
- Firefox needs to periodically check with Cisco's servers for updates for OpenH264.
- Whenever a version of OpenH264 is downloaded, we need to check a digital signature on
the binary and not install it if it doesn't verify.
- There needs to be a button that lets you disable the module.
- If no version of OpenH264 is installed or someone has disabled it, we need to just detect that case and not offer H.264.

Comment 2

[Benjamin Smedberg]

As noted in prior emails, I believe strongly that we ought to be using Mozilla domain names at least to check for updates, if not Mozilla servers. But I still haven't seen the complete spec about how all this is going to be deployed and QAed, which makes me think this is not yet ready for implementation.

Comment 3

[:shell escalante]

Bug 999721 - Implement OpenH264 Signing opened as separate bug from this one.  Likely another person/3rd party will do the signing implementation.  Bug 985255 (this bug) covers download, verify, install, and update.

Comment 4

[Randell Jesup [:jesup] (needinfo me)]

What's the next step here, and who's working on it?

Comment 5

[Benjamin Smedberg]

Bug 1013354 resolved to the point where we have a plan. Woot.