[Web4lib] Firefox plug-in update security issues and Zotero

[Salvatore Vassallo]

>  My most popular plug-in is Zotero which updates from their own
>  site.  Anyone know if the update is done with an SSL-secure
>  site?

Yes, Zotero already follows new rules on secure updating[1].
Infact updateUrl uses https, updateLink doesn't point to http, but
includes an updateHash [2]

--
Salvatore Vassallo

[1] http://developer.mozilla.org/en/docs/Extension_Versioning%2C_Update_and_Compatibility#Securing_Updates
[2] https://www.zotero.org/download/update.rdf