We've been dogfooding Balrog using the app.update.url.override pref, but that disables the https cert checks end-users have enabled. To switch nightly users to Balrog we'll need to prefs app.update.certs.N.commonName, app.update.certs.N.issuerName set for whatever N is next (see also bug 912675). Can't do this yet because aus4.m.o is not set up yet. This should go over to Firefox::Preferences when we we're ready to go.

Also, we have two issuers set up for aus3.m.o in case something is compromised. We should carry that over to aus4 too. Added a comment on bug 832461 to help track that.

We could dupe this against bug 885477, since the plan is to modify app.update.url there and we can do the cert prefs at the same time. It might be useful to have the cert prefs already deployed though, since that allows us the possibility of redirecting from aus3 to aus4 if enough users have picked up the cert prefs.

Should this be in RelEng, or IT?

Oops sorry. Just realized this is about adding them to the app.

This is getting done in bug 885477 as it turns out.