Extension Versioning, Update and Compatibility - MDC - 0 views
-
The updateURL uses https, or there is no updateURL at all (which defaults to addons.mozilla.org which is https) The updateURL uses http and the updateKey entry is specified which will be used to verify the data in the update manifest.
-
In the update manifest delivered from the updateURL the updateLink must be specified in one of the following ways: The updateLink to the XPI file must use https The updateLink can use http and you must include an updateHash for the XPI file using sha1, sha256, sha384 or sha512 hash algorithms.