2 ms·

> The ImageMagick developers can fix their problem by purchasing a cheap OV code signing certificate and then using Conveyor By "cheap" you mean $500/year[0]?

> The ImageMagick developers can fix their problem by purchasing a cheap OV code signing certificate and then using Conveyor By "cheap" you mean $500/year[0]? Then for anyone who isn't open source it's another $45/month on top for Conveyor. That's hardly "accessible". That said, Conveyor looks awesome. We (thankfully) distribute our application via Steam/EGS/etc but when we were looking at bundling installers before that it was a nightmare and we probably would have just paid for Conveyor. [0] https://order.digicert.com/step1/code_signing https://order.digicert.com/step1/code_signing

mike_hearn 3y ago
Well, firstly, buying certs is optional. You can distribute via the Microsoft Store and they'll sign for you. That's a $19 one time fee, no subscription. It's by far the cheapest way to distribute signed software on Windows. Conveyor can prepare everything and do the upload for you. So this stuff only applies if you don't want to go via the store. Now you picked DigiCert and their cloud HSM solution. They're unfortunately quite expensive. SSL.com is a lot cheaper: https://www.ssl.com/certificates/code-signing/buy/ https://www.ssl.com/certificates/code-signing/buy/ So about $100 / yr, with a one off fee to buy a USB key. And then ImageMagick is open source so they could use the tool for free. Even commercially, $100/yr plus $45/month isn't particularly expensive compared to the labor cost of developing software commercially. The cost of the tool is like one hour of skilled labor at contracting rates per month. It'll save far more time than that given that as you said, doing deployment by hand is a nightmare. And as you note, if your app is open source then you can use it for free. So then we're down to using the MS Store + Conveyor for free: $19, one off. Anyone can afford that.
Dalewyn 3y ago
$500 per year is nothing, that's $41.67 per month or $1.37 per day. I'm going to ignore Conveyor because that post was just a sly advertisement.

mike_hearn 3y ago

Well, firstly, buying certs is optional. You can distribute via the Microsoft Store and they'll sign for you. That's a $19 one time fee, no subscription. It's by far the cheapest way to distribute signed software on Windows. Conveyor can prepare everything and do the upload for you. So this stuff only applies if you don't want to go via the store. Now you picked DigiCert and their cloud HSM solution. They're unfortunately quite expensive. SSL.com is a lot cheaper: https://www.ssl.com/certificates/code-signing/buy/ https://www.ssl.com/certificates/code-signing/buy/ So about $100 / yr, with a one off fee to buy a USB key. And then ImageMagick is open source so they could use the tool for free. Even commercially, $100/yr plus $45/month isn't particularly expensive compared to the labor cost of developing software commercially. The cost of the tool is like one hour of skilled labor at contracting rates per month. It'll save far more time than that given that as you said, doing deployment by hand is a nightmare. And as you note, if your app is open source then you can use it for free. So then we're down to using the MS Store + Conveyor for free: $19, one off. Anyone can afford that.

Dalewyn 3y ago

$500 per year is nothing, that's $41.67 per month or $1.37 per day. I'm going to ignore Conveyor because that post was just a sly advertisement.