4 ms·
"a SSL certificate isn’t a 100% gauruntee of safety" What have SSL certificates got to do with code signing? I have a feeling it involves speaking authoritati
by ctz 15y ago
"a SSL certificate isn’t a 100% gauruntee of safety"
What have SSL certificates got to do with code signing? I have a feeling it involves speaking authoritatively on a subject you clearly don't understand ("properly-encrypted checksum" indeed).
- wladimir 15y agoThey do have a big overlap. Both SSL and code signing use signatures to confer 'trustworthyness' of a certain source.
- ctz 15y agoNot really. SSL solely exists to authenticate domain names. Having 15USD and a domain name does not make you trustworthy. Likewise, code signing is an anti-tamper and publisher identification mechanism rather than anything which gives the end-user a reason to trust any signed executable. Again, having 15USD does not make you trustworthy.
- wladimir 15y agoI should have added "to the end-user" using happy/sad iconography. Nothing in the world can make you trustworthy, I don't want to get into that discussion, which is also why I put it in scare quotes.
- tomjen3 15y agoNo but knowing who you are makes you trustworthy because if the code installs viruses, you can be arrested. You are no longer some anonymous person in Eastern Europe.
- moe 15y agoSSL cert != knowing who the other party is