Two concerns. Say you've made a bunch of apps and you are signing them and one day Apple judges that one of them is nefarious and revokes your developer key. D

Two concerns. Say you've made a bunch of apps and you are signing them and one day Apple judges that one of them is nefarious and revokes your developer key. Does that mean that /all/ of your apps will now fail to run in the "signed apps only" mode, rather than only the nefarious one? If so that's more punitive than the iOS App Store, where I've heard of individual applications being taken down but never of a developer itself being black-balled. (Will you be able to apply for another key? Will you have to play identity games to try and pass yourself off as another person?) Secondly, I've said above that an unsigned app will no longer "run", which is what the language on the Panic blog implies. Will it really check the validity of the developer's certificate every time a program is /run/? Will you be happily using someone's app one day, and then the next day find it doesn't start up anymore because some other app from the same developer which you might have no interest in or knowledge of has been judged to be bad? That doesn't sound very user friendly. I mean, I would have assumed that such a check would only apply at /install/ time, rather than run time, but everything I've read so far seems to be leaning towards the latter. (Sorry - doing a quick check before posting this of Gruber's article - which I hadn't actually read yet - seems to confirm that both of my concerns are real. Oh my.)