4 ms·
A. Indeed, that requirement only apply to EV cert (at least for the cert authority I used). B. That's not always the case with indie developers. C. Well, it t
by rubymamis 2y ago
A. Indeed, that requirement only apply to EV cert (at least for the cert authority I used).
B. That's not always the case with indie developers.
C. Well, it took me. My cert authority was GlobalSign.
> but contrary to the urban legend they are not getting instantly shit-canned by the Defender.
That was not my experience. Try to download an unsigned binary using Edge and see what happens. From what I remember (I'm on macOS, mostly), they are "getting instantly shit-canned".
- lazyeye 2y agoThere is a new approach to doing code-signing called "trusted signing". Havent used it myself so can't comment on the benefits https://www.advancedinstaller.com/trusted-signing-integration.html https://www.advancedinstaller.com/trusted-signing-integratio... https://learn.microsoft.com/en-us/azure/trusted-signing/overview https://learn.microsoft.com/en-us/azure/trusted-signing/over...