@Paul - If you decide to ship dmg's in the end, note you can still feed zip's to Sparkle (might be more efficient as a bonus). The archive format for initial distribution and updating doesn't have to be the same (hence Sparkle does not *have* to understand ). The quarantine is removed in the update process, avoiding translocation and other stuff.