← Back to context

Comment by r1ch

21 days ago

This is the same direction that Microsoft is taking Windows. Smart App Control is already rolling out to some regions - no .exe will run without a code signing certificate.

https://learn.microsoft.com/en-us/windows/apps/develop/smart...

11 comments

r1ch

Reply
kiicia  21 days ago

Code signing by pseudonymous key is different that requirement to cede personal data to central registry

  • ack_complete  21 days ago

    It requires a code signing certificate from one of the trusted central authorities, and generally as an individual you must have your legal name on the code signing certificate. It's not pseudonymous.

ozim  21 days ago

Code signing is somewhat OK as I can get code signing cert using provider in my country that I can go to physically and show their employee my ID.

If google does that then it’s not the worst.

Worst is having to get my ID and all details scanned and processed by Google.

tensor  21 days ago

I really wish Microsoft made it cheaper to get a certificate. With Apple you pay $100 a year for any number of certs. Last I looked into it a cert for a single Windows app costs $400+ per year and requires a hardware token.

  • evanelias  21 days ago

    They greatly improved the situation over the past couple years. Azure Trusted Signing is only $10/month and provides cloud-based signing.

    It's a huge pain to set up initially, but it's smooth sailing after that. There's a good tutorial at https://melatonin.dev/blog/code-signing-on-windows-with-azur...

    • missedthecue  21 days ago

      The setup is the most insane stupid stuff I've dealt with in a while. I am currently waiting for them to agree that my DUNS number is real, and they made me remove the WHOIS privacy from my domain name to verify that my address is associated with it. The billing receipts from my host were insufficient for reasons they couldn't explain. Had to upgrade to the $30/mo and then the $100/mo support plan just to speak to someone and it's been 4 weeks without movement. But hopefully it will be worth it in the end, the EV certs are crazy expensive and don't even remove smartscreen warnings anymore.

      2 replies →

    • jemmyw  21 days ago

      Only available to US and Canadian businesses who have more than 3 years of tax history. Weird limitation.