Yes sure, I only wanted to say, that smth changed/smth is missing from using 
NetBeans > 9. So there where no problems with the old oracle NetBeans until 8.2 
(Maybe they where signed correctly) and no problems with NetBeans 9. It started 
happening with NetBeans 10. But to end my discussion, I will create a ticket or 
a new thread about that problem.


Cheers

Chris



Von: Pete Whelpton
Gesendet: Freitag, 5. April 2019 11:05
An: dev@netbeans.incubator.apache.org
Betreff: Re: [DISCUSS] Experimental installers for 11.0

No worries :)   My understanding (I'm 100% sure that this my understanding
is correct) is that digital signing weights the algorithm more in favour of
not displaying a warning, but the early adopters (first few people to
download) may still get the warning until a sufficient level of "trust" has
been built up.

All the best,

P

On Fri, Apr 5, 2019 at 10:01 AM Christian Lenz <christian.l...@gmx.net>
wrote:

> So signing is missing here, if I understand it correctly. Thx for the link
> Pete.
>
>
> Cheers
>
> Chris
>
>
>
> Von: Pete Whelpton
> Gesendet: Freitag, 5. April 2019 10:29
> An: dev@netbeans.incubator.apache.org
> Betreff: Re: [DISCUSS] Experimental installers for 11.0
>
> The smartscreen warning is mentioned in the Smartscreen wikipedia page,
> under criticism:  https://en.wikipedia.org/wiki/Microsoft_SmartScreen
>
> *SmartScreen Filter creates a problem for small software vendors when they
> distribute an updated version of installation or binary files over the
> internet. Whenever an updated version is released, SmartScreen responds by
> stating that the file is not commonly downloaded and can therefore install
> harmful files on your system. This can be fixed by the author digitally
> signing the distributed software. Reputation is then based not only on a
> file's hash but on the signing certificate as well. A common distribution
> method for authors to bypass SmartScreen warnings is to pack their
> installation program (for example Setup.exe) into a Z
> <https://en.wikipedia.org/wiki/Zip_(file_format)>ip-Archive and distribute
> it that way, though this can confuse non-expert users.  *
>
>
>
> On Fri, Apr 5, 2019 at 9:24 AM Christian Lenz <christian.l...@gmx.net>
> wrote:
>
> > Hi,
> >
> > I’m fine with adding this with a comment that those installer are not
> > official.
> >
> > One Issue here is, when I wanted to start the installer, Windows says
> > again this message: https://ibb.co/2Nr8Q43. This happened also for
> > NetBeans > 9. Until NetBeans 9, I didn’t have this Problem. So smth
> changed
> > in the behaviour of the NetBeans executables/binaries that Windows will
> > show this message. I already gave this info in another thread. This will
> > only happen, when I download NetBeans, fresh and new. But when I delete
> the
> > whole folder and the whole dependent directories (userdir, cache), it
> will
> > show the message again.
> >
> > Should I create a new thread?
> >
> >
> > Cheers
> >
> > Chris
> >
> >
> >
> > Von: Geertjan Wielenga
> > Gesendet: Freitag, 5. April 2019 09:54
> > An: dev
> > Betreff: [DISCUSS] Experimental installers for 11.0
> >
> > Hi all,
> >
> > Reema has put the installers created from the installer sources in her
> pull
> > request on Apache NetBeans GitHub in her repo:
> >
> >
> >
> https://github.com/rtaneja1/incubator-netbeans/tree/installer-bin-11vc4/nbbuild/installer/binaries
> >
> > She also has a process whereby the installers can be generated as part of
> > the build.
> >
> > However, since we have not checked in the sources of the installer into
> > Apache NetBeans GitHub and we have not included these convenience
> binaries
> > as part of the vote threads, the installers above can not be seen as
> > official Apache NetBeans installers -- though that should be the aim for
> > the next releases.
> >
> > However, as discussed in other threads some time ago, there's nothing
> wrong
> > with explicitly linking to the above on the page below so long as we
> clear
> > state that these are not official Apache NetBeans installers, though that
> > they should be seen as experimental installers for the next release:
> >
> > https://netbeans.apache.org/download/nb110/nb110.html
> >
> > Do we agree with this? Interested in responses and if everything is
> > favorable and no objections, will add the info as described above to the
> > page above in 24 hours.
> >
> > Thanks,
> >
> > Gj
> >
> >
>
>

Reply via email to