3 ms·
It’s not even necessary to test. Once you’ve done it a few times codesigning is a piece of cake. But there a few flags you absolutely pay attention to or else i
by yardie 9y ago
It’s not even necessary to test. Once you’ve done it a few times codesigning is a piece of cake. But there a few flags you absolutely pay attention to or else it’s going to bite you in the ass way down the line.
- chrisseaton 9y ago> It’s not even necessary to test. Once you’ve done it a few times codesigning is a piece of cake. Presumably this is what Oculus thought and so how they got in this mess.
- yardie 9y agoYes but the test should be, “does this key have a valid timestamp?” not spin up a VM, set the clock 10 years in the future. BTW, most commercial installer progtams will apply a valid timestamp if codesigning is enabled. So to save ~$1000 someone decided the tools built into Visual Studio were good enough. Anyone that ships commercial software that does more than a basic install into C:\program files will know to spend the money, it’s worth it.
- mikeash 9y agoThe question is, how many other such tests should there be, and what if you’ve missed one?