3 ms·

I don't get the whole panic around notarization. I maintain a big open source project, and is quite complex. It is a game engine with downloadable plugins and l

by Svoka 5y ago

I don't get the whole panic around notarization. I maintain a big open source project, and is quite complex. It is a game engine with downloadable plugins and lots of system integration. Notarization was easy. I didn't use Xcode GUI for it, because it has one line command to do it, which is more comfortable for me: https://github.com/coronalabs/corona/blob/53eeb3e31ac09f7a46c20c84c5edaf75f514ff7e/.github/workflows/build.yml#L338 https://github.com/coronalabs/corona/blob/53eeb3e31ac09f7a46... Not a biggie.

sneak 5y ago
The panic is that it is an anticompetitive moat that they are setting up that, if used in such a way, would allow them insane preference for their own App Store on all Apple computers. Imagine what sort of system-level settings you'd have to change on macOS today if you wanted to ship a competing macOS App Store on Apple devices with UX similar to Apple's own, but without Apple signing keys. You'd basically have to write some malware-style code to get inside of Gatekeeper and privilege your downloaded/purchased apps the same way Apple does for apps from their own App Store. How long do you think they would let this stand before trying to whack your installer daemon with XProtect for posing "danger to profit integrity"? (They'd spell "profit" as "system", though.)