4 ms·

How is open-source supposed to compete without access to Apple's certificates? If you are constantly forced to override the warnings about unsigned software, as

by vr46 2y ago

How is open-source supposed to compete without access to Apple's certificates? If you are constantly forced to override the warnings about unsigned software, assuming your system even allows you in the first place, how much friction before less technical users give up? Code signing is good, I like it, I approve, but it is a big obstacle for me personally and others who cannot afford Apple Developer Credentials.

diggan 2y ago
> How is open-source supposed to compete without access to Apple's certificates? Does the license of your application somehow prevent you from following whatever Apple wants to do regarding signing? I think there are plenty of apps/games out there built on FOSS technology yet they're still signed and run like anything else signed on macOS, but maybe I remember incorrectly?
- devsda 2y ago
  It might be nothing technical. Some developers avoid paying for the Apple dev program on principle. Joining it could be seen as supporting Apple's attempt at building walled gardens. There's also the operational challenges for open source like who will sign-up and how to secure or maintain the signing keys etc. It brings in lot of friction.
- BoredPositron 2y ago
  It’s the 99 bucks argument every time…
  - Karliss 2y ago
    The problem is that with exception of single person projects it's not as simple as paying 99$. Using individual developer account means exposing private information of one of the developers (which not everyone wants) and is a major buss factor. Doing it properly with organization account means nontrivial amount of paper work to establish either a commercial company or an officially registered non profit. There are very few open source projects big enough for this.
konart 2y ago
I'm pretty sure I use many open-source projects that have Apple's certificates. So the only question is communities desire. There is no technical problem here.
- timeon 2y ago
  > There is no technical problem here. Just financial and organizational one. Not every open-source project is going to do that. Not sure why Apple had to change how Gatekeeper works. I will have to look for an alternative once my mbp dies. It gets tiresome to fight with the OS for every other app after every update now. Especially when it worked perfectly OK before.

by vr46 2y ago

diggan 2y ago

> How is open-source supposed to compete without access to Apple's certificates? Does the license of your application somehow prevent you from following whatever Apple wants to do regarding signing? I think there are plenty of apps/games out there built on FOSS technology yet they're still signed and run like anything else signed on macOS, but maybe I remember incorrectly?

devsda 2y ago
It might be nothing technical. Some developers avoid paying for the Apple dev program on principle. Joining it could be seen as supporting Apple's attempt at building walled gardens. There's also the operational challenges for open source like who will sign-up and how to secure or maintain the signing keys etc. It brings in lot of friction.
BoredPositron 2y ago
It’s the 99 bucks argument every time…
- Karliss 2y ago
  The problem is that with exception of single person projects it's not as simple as paying 99$. Using individual developer account means exposing private information of one of the developers (which not everyone wants) and is a major buss factor. Doing it properly with organization account means nontrivial amount of paper work to establish either a commercial company or an officially registered non profit. There are very few open source projects big enough for this.

konart 2y ago

I'm pretty sure I use many open-source projects that have Apple's certificates. So the only question is communities desire. There is no technical problem here.

timeon 2y ago
> There is no technical problem here. Just financial and organizational one. Not every open-source project is going to do that. Not sure why Apple had to change how Gatekeeper works. I will have to look for an alternative once my mbp dies. It gets tiresome to fight with the OS for every other app after every update now. Especially when it worked perfectly OK before.