Windows code signing

Bob Sneidar bobs at twft.com
Fri Jan 14 12:20:08 EST 2011


This is one of the reasons we did not switch to Vista or Windows 7. In XP signing was optional. In Vista and 7 it is mandatory. This is akin to malware infecting your computer and then charging you for a utility to "fix" it. It's only slightly better in that it will run without continually nagging you and getting in your way. But it's still an abominable practice. 

Bob


On Jan 13, 2011, at 8:09 PM, Bill Vlahos wrote:

> Jaqui,
> 
> I think most users won't care and I've certainly run such software myself. The version of InfoWallet that is downloadable from the web site is still not signed (I plan on making the signed version available in the near future) and I haven't had anyone complain except when Norton flagged it as suspect. Signing it solved that problem immediately.
> 
> I have successfully code signed InfoWallet with a TUCOWS/Comodo certificate which only costs $75 (what a deal). The process is very difficult, tedious, and time consuming to set up for any of the sources. Once set up as a batch file it is now trivially simple for me to sign apps - just drag and drop.
> 
> When I get some time I will try to document the procedure. Here are some links that were instrumental to me and one of them has a link to a $49 commercial application to help make is easier. I haven't looked at it (doing it the hard way myself) but if it is half as good as they describe it would be worth it.
> http://www.wiscocomputing.com/articles/code-signing.htm
> http://msdn.microsoft.com/en-us/library/8s9b9yaz(VS.80).aspx
> http://help.godaddy.com/article/4782
> 
> Bill Vlahos
> _________________
> InfoWallet (http://www.infowallet.com) is about keeping your important life information with you, accessible, and secure.
> 
> On Jan 13, 2011, at 5:04 PM, J. Landman Gay wrote:
> 
>> I'm in the position of wanting to release a no-cost or low-cost app for Windows, but without a code-signing certificate Windows puts up the scary "untrusted publisher" notification every time the app launches. Certificates cost a couple hundred dollars and I don't want to do that.
>> 
>> So the question is, how do other shareware or freeware authors deal with it? Are users so used to it by now they'll just click OK and proceed? What do you guys do?
>> 
>> -- 
>> Jacqueline Landman Gay         |     jacque at hyperactivesw.com
>> HyperActive Software           |     http://www.hyperactivesw.com
>> 
>> _______________________________________________
>> use-livecode mailing list
>> use-livecode at lists.runrev.com
>> Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
>> http://lists.runrev.com/mailman/listinfo/use-livecode
> 
> 
> _______________________________________________
> use-livecode mailing list
> use-livecode at lists.runrev.com
> Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode





More information about the use-livecode mailing list