Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(2711)

Unified Diff: chrome/common/extensions/docs/static/packaging.html

Issue 10455004: Making sure self-hosting and packaging docs are clear about keeping private key secure (Closed) Base URL: http://src.chromium.org/svn/trunk/src/
Patch Set: Created 8 years, 7 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « chrome/common/extensions/docs/static/hosting.html ('k') | no next file » | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: chrome/common/extensions/docs/static/packaging.html
===================================================================
--- chrome/common/extensions/docs/static/packaging.html (revision 138817)
+++ chrome/common/extensions/docs/static/packaging.html (working copy)
@@ -1,6 +1,16 @@
<div id="pageData-name" class="pageData">Packaging</div>
<div id="pageData-showTOC" class="pageData">true</div>
+<p class="note">
+<b>For Advanced Developers Only:</b>
+Do not follow the instructions on this page
+unless you understand the security implications
+of packaging and hosting files on your own server.
+If you host on the Chrome Web Store,
+you do not need to worry
+about packaging or self-hosting.
+</p>
+
<p>
This page describes how to package your extension.
As the <a href="overview.html">Overview</a> explains,
@@ -10,8 +20,7 @@
</p>
<p>
-<b>Note:</b>
-You might not need to package your extension.
+You do not need to package your own extension.
If you publish your extension using the
<a href="https://chrome.google.com/webstore/developer/dashboard">Chrome Developer Dashboard</a>,
then the only reason to create your own <code>.crx</code> file
@@ -26,8 +35,9 @@
When you package an extension,
the extension is assigned a unique key pair.
The extension's ID is based on a hash of the public key.
-The private key is kept private
-and used to sign each version of the extension.
+The private key is used to sign each version of the extension
+and must be secured from public access.
+Do not store the private key in your packaged files.
</p>
@@ -140,18 +150,22 @@
<p>
You can use the Chrome Developer Dashboard
to upload an extension that you've previously packaged yourself.
-However, unless you take special steps,
-the extension's ID in the Chrome Web Store
-will be different from its ID in the package you created.
-This different ID might be a problem if you've
-distributed your extension package,
-because it allows users to install multiple versions of your extension,
-each with its own local data.
+However, a new extension ID will be created
Aaron Boodman 2012/06/06 18:27:26 I don't think this section needs to change. The pr
+in the Chrome Web Store.
+You must ensure that only one extension ID is used.
+If you've already distributed your extension package,
+replace the newly created extension ID
+with your existing extension ID.
+Otherwise, users can install multiple versions
+of your extension, each with its own local data.
+If you haven't distributed your extension package,
+you can use the new extension ID,
+taking care to remove any references to the old one.
</p>
<p>
-If you want to keep the extension ID the same,
-follow these steps:
+To replace the newly created extension ID
+with your existing extension ID:
</p>
<ol>
« no previous file with comments | « chrome/common/extensions/docs/static/hosting.html ('k') | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698