GlobalSign vs self-signed cert being used for code signing makes not one lick of difference though? You can't use any public cert alone to forge an update, unle

GlobalSign vs self-signed cert being used for code signing makes not one lick of difference though? You can't use any public cert alone to forge an update, unless you're trying to sell us on the Notepad++ author having source controlled their private key. The thing that irritates is me people thinking that PKI only works when $corp is involved. Self-signed works just as well, and to be frank, it is better that you start building up your savvy with these primitives on your own the way the world is going.