3 ms·
> They already had the means to revoke malicious binaries after-the-fact by revoking the corresponding developer certificate That's a big hammer because it br
by captainredbeard 6y ago
> They already had the means to revoke malicious binaries after-the-fact by revoking the corresponding developer certificate
That's a big hammer because it breaks everything that was ever signed with the certificate.
- mullingitover 6y agoThat's fine with me - if the developer was caught with one malware-infected app, I would worry about the other malware they shipped that wasn't caught.
- _qulr 6y agoNot true. They can make the certificate invalid after a certain date, while still allowing software signed before that date. This happened when Panic lost their signing certificate.