5 ms·
What about for Windows development? I just ordered one through my company in order to bypass 'untrusted app' dialogs that my non tech savvy users can't figure
by cevn 7y ago
What about for Windows development? I just ordered one through my company in order to bypass 'untrusted app' dialogs that my non tech savvy users can't figure out.
- Someone1234 7y agoNot all Code Signing certificates are Extended Validation. Non-EV Code Signing certificates bypass that warning (Authenticode). So it has no impact. Code Signing will still be $175 too expensive and still work just as they have.
- donmcronald 7y agoNon-EV requires SmartScreen trust building though, right? Register a company, buy an EV cert, sign your malware. The only barrier is $ because there’s no limit on creating cheap companies. The whole “trust” industry is ripe for disruption if someone can get Microsoft on board.
- zanderz 7y agoMS still requires that drivers be signed with an EV cert https://docs.microsoft.com/en-us/windows-hardware/drivers/dashboard/get-a-code-signing-certificate https://docs.microsoft.com/en-us/windows-hardware/drivers/da... And it supposedly does help add some SmartScreen reputation, but that system is totally opaque and there is no way to quantify just what the EV cert adds.
- judge2020 7y agoNew EV certificates don't just help with SmartScreen, they completely bypass it. Regular Windows code signing is the smartscreen booster.
- gruez 7y agoThis is a change in Chrome, so I doubt it affects windows. Also, EV certificates are for bypassing reputation checks for smartscreen[1], not for UAC dialogs. If the user has smartscreen disabled, there's no difference. [1] https://blogs.msdn.microsoft.com/ie/2012/08/14/microsoft-smartscreen-extended-validation-ev-code-signing-certificates/ https://blogs.msdn.microsoft.com/ie/2012/08/14/microsoft-sma...
- CamperBob2 7y agoNone of this has anything to do with code signing. It's a misleading headline, engineered to generate clicks.