[whatwg] Installable web apps

Antony Sargent asargent at google.com
Fri Jun 4 11:22:49 PDT 2010

On Fri, Jun 4, 2010 at 4:58 AM, Henri Sivonen <hsivonen at iki.fi> wrote:

> After googling around a bit, I was unable to find a signed .crx file for
> analysis. (I took apart 3 .crx files and gave up.) Is the signing mechanism
> documented somewhere? .wgt reinvents the .jar signing wheel by the basic
> idea of .jar signing with XML Signatures.

All .crx files are signed - they're just a zip with the public key and
signature appended on to them. The chrome extensions gallery has lots of


For developers who choose to use it, the gallery takes care of
generating/storing the private key and signing new versions. They just
upload a plain zip file with their extension's resources. For those who want
to do this themselves, the developer tools on the chrome://extensions page
inside chrome itself lets you create a signed .crx file.

You can find some documentation here:

And here's the browser code to create .crx files:

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.whatwg.org/pipermail/whatwg-whatwg.org/attachments/20100604/9fe527c0/attachment-0002.htm>

More information about the whatwg mailing list