3 ms·
> Giving out free code-signing certificates also makes it easier for malware to get legitimate certificates. This is akin to LetsEncrypt for certs IMO that wou
by Avamander 6y ago
> Giving out free code-signing certificates also makes it easier for malware to get legitimate certificates. This is akin to LetsEncrypt for certs
IMO that would still be good.
This would help protect against dangerous middlemen, all those massive sites containing thousands of pieces of software, many with added ad- or other badware. If CCleaner (just an random example) could sign their executables for free, then there'd be a very justified suspicion if it isn't signed.
Not to mention, does the existence of a cert really make a piece of (proprietary) software trustworthy?
- 411111111111111 6y ago> This would help protect against dangerous middlemen but if everyone can get their certificate, they can always just sign it with their own...
- Avamander 6y agoYes, true. But it would be an additional hurdle and any weirdness like that is visible. Plus MS or AV vendors could blacklist actual signers that misbehave.
- donmcronald 6y ago> does the existence of a cert really make a piece of (proprietary) software trustworthy? Nope. I’d even goes as far as to say the majority of malware and other crap you don’t want on your PC is signed these days.