3 ms·
You don't actually need any new clever algorithms at all. At least on Windows, you can simply sign code with multiple certificates.
by TillE 11y ago
You don't actually need any new clever algorithms at all. At least on Windows, you can simply sign code with multiple certificates.
- btbuilder 11y agoAren't all algorithms "clever" at some level? I assume you are implying non-mainstream - that always carries risks, but there are some advantages: 1. The software that verifies the certificate doesn't need to be changed - which is quite an advantage if it has already been shipped, or if you need to change the signing rules at a later date. 2. The verification logic is exactly the same as if checking a regular, single signature certificate. Nice and simple, no bugs related to whether all criteria have been met by multiple certificates.