Re: Security use cases for packaging

Paging (future Dr.) Deian Stefan to the ER...

Any thoughts on using COWL for this kind of thing, with a pinned crypto key
as a confinement label to be combined with the regular Origin label?

-Brad

On Thu Jan 29 2015 at 1:43:05 PM Yan Zhu <yzhu@yahoo-inc.com> wrote:

> chris palmer wrote:
>
> > But other code from the same origin might not be signed, which could
> > break the security assertion of code signing.
>
>
> Maybe the code from the downloaded package has to be run from a local
> origin like chrome://*.
>
>