4 ms·
How does paying $100 per year to sign your binary ensure it's not malicious?
by wtetzner 8mo ago
How does paying $100 per year to sign your binary ensure it's not malicious?
- llm_nerd 8mo agoIt doesn't ensure anything. But it does force an identity trail (you have to prove your identity), and more importantly allows Apple to have a rapid kill switch: If a developer uses their account to distribute malware, Apple revokes the cert and those apps will no longer run on user devices (as soon as the revocation hits). Should it be $100 per year? No, that is ridiculous and usurious.