No worries :) My understanding (I'm 100% sure that this my understanding is correct) is that digital signing weights the algorithm more in favour of not displaying a warning, but the early adopters (first few people to download) may still get the warning until a sufficient level of "trust" has been built up.
All the best, P On Fri, Apr 5, 2019 at 10:01 AM Christian Lenz <christian.l...@gmx.net> wrote: > So signing is missing here, if I understand it correctly. Thx for the link > Pete. > > > Cheers > > Chris > > > > Von: Pete Whelpton > Gesendet: Freitag, 5. April 2019 10:29 > An: dev@netbeans.incubator.apache.org > Betreff: Re: [DISCUSS] Experimental installers for 11.0 > > The smartscreen warning is mentioned in the Smartscreen wikipedia page, > under criticism: https://en.wikipedia.org/wiki/Microsoft_SmartScreen > > *SmartScreen Filter creates a problem for small software vendors when they > distribute an updated version of installation or binary files over the > internet. Whenever an updated version is released, SmartScreen responds by > stating that the file is not commonly downloaded and can therefore install > harmful files on your system. This can be fixed by the author digitally > signing the distributed software. Reputation is then based not only on a > file's hash but on the signing certificate as well. A common distribution > method for authors to bypass SmartScreen warnings is to pack their > installation program (for example Setup.exe) into a Z > <https://en.wikipedia.org/wiki/Zip_(file_format)>ip-Archive and distribute > it that way, though this can confuse non-expert users. * > > > > On Fri, Apr 5, 2019 at 9:24 AM Christian Lenz <christian.l...@gmx.net> > wrote: > > > Hi, > > > > I’m fine with adding this with a comment that those installer are not > > official. > > > > One Issue here is, when I wanted to start the installer, Windows says > > again this message: https://ibb.co/2Nr8Q43. This happened also for > > NetBeans > 9. Until NetBeans 9, I didn’t have this Problem. So smth > changed > > in the behaviour of the NetBeans executables/binaries that Windows will > > show this message. I already gave this info in another thread. This will > > only happen, when I download NetBeans, fresh and new. But when I delete > the > > whole folder and the whole dependent directories (userdir, cache), it > will > > show the message again. > > > > Should I create a new thread? > > > > > > Cheers > > > > Chris > > > > > > > > Von: Geertjan Wielenga > > Gesendet: Freitag, 5. April 2019 09:54 > > An: dev > > Betreff: [DISCUSS] Experimental installers for 11.0 > > > > Hi all, > > > > Reema has put the installers created from the installer sources in her > pull > > request on Apache NetBeans GitHub in her repo: > > > > > > > https://github.com/rtaneja1/incubator-netbeans/tree/installer-bin-11vc4/nbbuild/installer/binaries > > > > She also has a process whereby the installers can be generated as part of > > the build. > > > > However, since we have not checked in the sources of the installer into > > Apache NetBeans GitHub and we have not included these convenience > binaries > > as part of the vote threads, the installers above can not be seen as > > official Apache NetBeans installers -- though that should be the aim for > > the next releases. > > > > However, as discussed in other threads some time ago, there's nothing > wrong > > with explicitly linking to the above on the page below so long as we > clear > > state that these are not official Apache NetBeans installers, though that > > they should be seen as experimental installers for the next release: > > > > https://netbeans.apache.org/download/nb110/nb110.html > > > > Do we agree with this? Interested in responses and if everything is > > favorable and no objections, will add the info as described above to the > > page above in 24 hours. > > > > Thanks, > > > > Gj > > > > > >
