3 ms·

Yup, It’s because it’s not signed with Authenticode, which is because it’s taking Comodo an insane amount of time to actually give me a certificate. Let’s Encry

Yup, It’s because it’s not signed with Authenticode, which is because it’s taking Comodo an insane amount of time to actually give me a certificate. Let’s Encrypt for code signing can’t come soon enough.

deleted 8y ago
[deleted]
slededit 8y ago
It will learn even unsigned code after enough time, but future versions may or may not keep your earned reputation. The certificate is a good idea.
gruez 8y ago
>Let’s Encrypt for code signing can’t come soon enough. AFAIK that will never happen because authenticode signing certificates are all essentially EV certificates, because they require verification of an individual's (or company's) identity. That's very expensive to do compared to DV certificates that letsecrypt currently issues, which have essentially $0 marginal cost.
ilaksh 8y ago
I used Comodo also (now apparently bought by Sectigo) and they are the worst company I have ever dealt with. First I was trying to get them to tell me if my documents were acceptable before I took them to the notary. They did not seem to speak English particularly well and could not recognize that my internet/phone bill was a phone bill (because it also mentioned internet so they had never heard of a combination phone/internet bill before apparently), could not recognize a financial statement. They kept repeating themselves but with subtle contradictions. Eventually I complained to K-Software (the reseller) and the guy then referred me to some account rep or something with a Western name. Then she sent me instructions which I followed and uploaded their notarized form. Which the instructions did not even say to upload the documents, just the notarized form. Then they said nothing and I eventually asked them what was going on. Then the Comodo rep replies and first of all does not acknowledge that I uploaded anything, 100% contradicts what was in the instructions, saying that not only the form needed to be notarized, but every individual page. I told the K-Software guy I was not going back to the notary. Then he calls them, I wait, I email him again, then they say I have to have my phone number in a valid third party registry. But they don't say what the ___ is a valid third party registry. And they never said that was required before -- I gave them the phone bill with my phone number on it. Anyway it took almost two months and maybe thirty emails before I finally got it.
- rolleiflex 8y ago
  I'm also going through the same thing (K-Software > Comodo) and it is horrible. I would strongly recommend against. Pay a little more and retain your sanity.

deleted 8y ago

[deleted]

slededit 8y ago

It will learn even unsigned code after enough time, but future versions may or may not keep your earned reputation. The certificate is a good idea.

gruez 8y ago

>Let’s Encrypt for code signing can’t come soon enough. AFAIK that will never happen because authenticode signing certificates are all essentially EV certificates, because they require verification of an individual's (or company's) identity. That's very expensive to do compared to DV certificates that letsecrypt currently issues, which have essentially $0 marginal cost.

ilaksh 8y ago

I used Comodo also (now apparently bought by Sectigo) and they are the worst company I have ever dealt with. First I was trying to get them to tell me if my documents were acceptable before I took them to the notary. They did not seem to speak English particularly well and could not recognize that my internet/phone bill was a phone bill (because it also mentioned internet so they had never heard of a combination phone/internet bill before apparently), could not recognize a financial statement. They kept repeating themselves but with subtle contradictions. Eventually I complained to K-Software (the reseller) and the guy then referred me to some account rep or something with a Western name. Then she sent me instructions which I followed and uploaded their notarized form. Which the instructions did not even say to upload the documents, just the notarized form. Then they said nothing and I eventually asked them what was going on. Then the Comodo rep replies and first of all does not acknowledge that I uploaded anything, 100% contradicts what was in the instructions, saying that not only the form needed to be notarized, but every individual page. I told the K-Software guy I was not going back to the notary. Then he calls them, I wait, I email him again, then they say I have to have my phone number in a valid third party registry. But they don't say what the ___ is a valid third party registry. And they never said that was required before -- I gave them the phone bill with my phone number on it. Anyway it took almost two months and maybe thirty emails before I finally got it.

rolleiflex 8y ago
I'm also going through the same thing (K-Software > Comodo) and it is horrible. I would strongly recommend against. Pay a little more and retain your sanity.