3 ms·

Good, this doesn't even need for the software to be sent to Apple, only the hash.

• jtbayly 8y ago
  How can they scan your software and run security checks on it based only on a hash? Are the checks actually run locally by xCode?
  • pgib 8y ago
    > Give users even more confidence in your software by submitting it to Apple to be notarized. The service automatically scans your Developer ID-signed software and performs security checks. Looks like it uploads a bundle to them for all that to happen on their side.
  • orf 8y ago
    They scan the software, not your software. If the hashed match against a known scanned good bit of software then it's safe. Maybe.
  • deleted 8y ago
    [deleted]
  • benatkin 8y ago
    The software is sent to Apple when it is notarized. When a user downloads and runs it, it is not sent to Apple. It just uses the hash. It would be pretty crazy for Mac OS to send the whole package to Apple to do a security scan, but a naive reader might think that.