I would like to be able to sign future versions of the Sage for
Windows installer.  Not only does it just *look* more professional
(users don't get a "Installing software from an unknown provider"
message when they install Sage), it also protects are users from bogus
or tampered with copies of the installer.

Unfortunately, certs with a trusted authority chain that can be used
for code signing are not free; there is not yet any equivalent of
LetsEncrypt for software binaries.  So we will have to pay a
certificate provider for one.  Some of the cheapest I could find are
Comodo certs from https://codesigncert.com/#codepricing from $75/yr
(or slightly less for multi-year certs).

Can one of OpenDreamKit, Cocalc, Sagemath.org, etc. put up some
funding for purchasing a signing certificate for Sage?  Once that's
done I'll need a copy of the cert and private key so that I can start
signing releases of Sage for Windows.

Thanks!
E

-- 
You received this message because you are subscribed to the Google Groups 
"sage-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to sage-devel+unsubscr...@googlegroups.com.
To post to this group, send email to sage-devel@googlegroups.com.
Visit this group at https://groups.google.com/group/sage-devel.
For more options, visit https://groups.google.com/d/optout.

Reply via email to