3 ms·
No, this information is wrong (unless it’s changed in the last 7 years). EV code signing certs are instantly trusted by Windows Defender. Source: We tried a no
by jonathanlydall 10mo ago
No, this information is wrong (unless it’s changed in the last 7 years). EV code signing certs are instantly trusted by Windows Defender.
Source: We tried a non-EV code signing certificate for our product used by only dozens of users at the time, never stopped showing scary warnings. When we got an EV, no more issues.
In case it makes a difference, we use DigiCert.
- e40 10mo agoNot true for us. We EV cert sign (the more expensive one) and my CEO ( the only one left that uses Windows) had this very problem. Apparently the first time a newly signed binary is run it can take up to 15 minutes for defender to allow it. First time I saw this, it was really annoying and confusing.
- jonathanlydall 10mo agoInteresting. I regularly download our signed installer often within a minute of it being made available, never noticed a delay. Maybe it’s very the first time Windows Defender sees a particular org on a cert. I renewed our cert literally on Friday, tested by making a new build of our installer and could instantly install it fine. You sure there was no other non Windows default security software on your bosses machine?
- feznyng 10mo agoThey did change it, I think after some debacle with Nvidia pushing an update. They seem to want devs to submit their files via their portal now to get rid of the screen: https://www.microsoft.com/en-us/wdsi/filesubmission https://www.microsoft.com/en-us/wdsi/filesubmission
- jonathanlydall 10mo agoI've never submitted our installers to there (or anywhere). I'm often the very first to install new builds (particularly our nightlies) and never had a delay or anything.
- e40 10mo agoDid you install it on the same machine or a different one? I was always able to install immediately on the same machine.