7 ms·
I know they are planning wildcard already (as per article), I'm just keeping my fingers crossed we will see code signing and others before too long... I unders
by wilhil 9y ago
I know they are planning wildcard already (as per article), I'm just keeping my fingers crossed we will see code signing and others before too long...
I understand though, code signing will be much harder to automate and maybe not so fit for purpose...
- cm2187 9y agoOut of curiosity, how would you implement the authorisation? Would you tie it to a domain? Would that even make sense?
- Klathmon 9y agoYou could go the keybase route and tie in with various platforms using anywhere that you can post a public message to post "proof". So if you wanted to sign a windows executable, you'd need to have a microsoft account, and that microsoft account would need a place that you could publicly post a string of text. Then it's up to the Lets Encrypt service to validate that and cut the certificate
- gruez 9y agoCode signing certificates are essentially EV certificates (in terms of validation required), so I doubt they'll be free anytime soon.