The update site and the content should be jar-signed
The update site and the content should be jar-signed