4 ms·

> they make it SO onerous for Desktop users to explicitly allow unsigned apps Not really onerous. However, you do have to use a terminal command to turn off G

> they make it SO onerous for Desktop users to explicitly allow unsigned apps Not really onerous. However, you do have to use a terminal command to turn off Gatekeeper. https://www.imore.com/how-open-apps-anywhere-macos-catalina-and-mojave https://www.imore.com/how-open-apps-anywhere-macos-catalina-...

webmobdev 6y ago
He means from the perspective of an app developer - it is hard to educate users when Apple's deliberate UI scares the user. Asking some some of them to disable Gatekeeper can also backfire with ignorant users, because it is a security measure against malware spread and execution (once malware is identified).
- GeekyBear 6y ago
  From the app developer's perspective, you can hardly spin a terminal command as any more onerous than a registry edit on Windows. Windows 10 SmartScreen is just as deliberate and just as scary.
  - JosephRedfern 6y ago
    "Everyday" users shouldn't have to edit the registry in order to install an app, either. Being no worse than Windows doesn't make it good.
  - deleted 6y ago
    [deleted]
  - shawnz 6y ago
    You don't need to pay anything or sign up for any app store to be approved by SmartScreen, and even if you are not approved there is a "Run anyway" button right there in the dialog.
    - GeekyBear 6y ago
      You absolutely have to pay for an extended validation code signing certificate for Windows 10 Smartscreen to allow your installer to run.
      - shawnz 6y ago
        That's not true. Binaries can acquire a positive reputation by being commonly downloaded. However paying for an EV certificate (or getting windows logo certification) is the only way to bypass the warning with no reputation.
        GeekyBear 6y ago
        What new developer already has a reputation score? You absolutely have to pay for an extended validation code signing certificate, or your installer will be blocked by default. Third parties charge more for that code signing certificate than Apple does for a developer account.
        shawnz 6y ago
        No new developer already has a reputation score. Why should they? Is there something unfair about warning users that uncommonly downloaded software is more likely to contain malware? If anything, the problem is that even software with an EV certificate should be subject to the warning (like how SmartScreen worked in the past).
        GeekyBear 6y ago
        The entire point of Gatekeeper and SmartScreen is to only warn users about unsigned software that could install a trojan horse. If you check to see if the developer's signing certificate has been revoked before running their software, you can be reasonably sure that doing so is safe. Apple's developer program is cheaper than the extended validation code signing certificate you need to develop and sign software use on Windows without running into a block from SmartScreen.
  - deleted 6y ago
    [deleted]
shawnz 6y ago
Turning off gatekeeper disables the protections for all apps, not a specific app of the user's choosing. That is not what the other poster was asking for

webmobdev 6y ago

He means from the perspective of an app developer - it is hard to educate users when Apple's deliberate UI scares the user. Asking some some of them to disable Gatekeeper can also backfire with ignorant users, because it is a security measure against malware spread and execution (once malware is identified).

GeekyBear 6y ago
From the app developer's perspective, you can hardly spin a terminal command as any more onerous than a registry edit on Windows. Windows 10 SmartScreen is just as deliberate and just as scary.
- JosephRedfern 6y ago
  "Everyday" users shouldn't have to edit the registry in order to install an app, either. Being no worse than Windows doesn't make it good.
- deleted 6y ago
  [deleted]
- shawnz 6y ago
  You don't need to pay anything or sign up for any app store to be approved by SmartScreen, and even if you are not approved there is a "Run anyway" button right there in the dialog.
  - GeekyBear 6y ago
    You absolutely have to pay for an extended validation code signing certificate for Windows 10 Smartscreen to allow your installer to run.
    - shawnz 6y ago
      That's not true. Binaries can acquire a positive reputation by being commonly downloaded. However paying for an EV certificate (or getting windows logo certification) is the only way to bypass the warning with no reputation.
      - GeekyBear 6y ago
        What new developer already has a reputation score? You absolutely have to pay for an extended validation code signing certificate, or your installer will be blocked by default. Third parties charge more for that code signing certificate than Apple does for a developer account.
        shawnz 6y ago
        No new developer already has a reputation score. Why should they? Is there something unfair about warning users that uncommonly downloaded software is more likely to contain malware? If anything, the problem is that even software with an EV certificate should be subject to the warning (like how SmartScreen worked in the past).
        GeekyBear 6y ago
        The entire point of Gatekeeper and SmartScreen is to only warn users about unsigned software that could install a trojan horse. If you check to see if the developer's signing certificate has been revoked before running their software, you can be reasonably sure that doing so is safe. Apple's developer program is cheaper than the extended validation code signing certificate you need to develop and sign software use on Windows without running into a block from SmartScreen.
- deleted 6y ago
  [deleted]

shawnz 6y ago

Turning off gatekeeper disables the protections for all apps, not a specific app of the user's choosing. That is not what the other poster was asking for