[Bf-committers] Installer for Windows is not signed
Hi. I just mentioned that installer is not signed by developer. Is it OK? ___ Bf-committers mailing list Bf-committers@blender.org http://lists.blender.org/mailman/listinfo/bf-committers
Re: [Bf-committers] Installer for Windows is not signed
Yes Blender is a safe program On Thu, Oct 15, 2015 at 10:07 AM, Yury Baranov wrote: > Hi. I just mentioned that installer is not signed by developer. Is it OK? > ___ > Bf-committers mailing list > Bf-committers@blender.org > http://lists.blender.org/mailman/listinfo/bf-committers > ___ Bf-committers mailing list Bf-committers@blender.org http://lists.blender.org/mailman/listinfo/bf-committers
Re: [Bf-committers] Installer for Windows is not signed
Weren't other recent releases signed though? It is kind of unnerving when Windows pops up a "Do you trust this Unknown Developer?" alert during installation. Mike Erwin musician, naturalist, pixel pusher, hacker extraordinaire On Thu, Oct 15, 2015 at 7:34 PM, Aaron Carlisle wrote: > Yes Blender is a safe program > > On Thu, Oct 15, 2015 at 10:07 AM, Yury Baranov > wrote: > > > Hi. I just mentioned that installer is not signed by developer. Is it OK? > > ___ > > Bf-committers mailing list > > Bf-committers@blender.org > > http://lists.blender.org/mailman/listinfo/bf-committers > > > ___ > Bf-committers mailing list > Bf-committers@blender.org > http://lists.blender.org/mailman/listinfo/bf-committers > ___ Bf-committers mailing list Bf-committers@blender.org http://lists.blender.org/mailman/listinfo/bf-committers
Re: [Bf-committers] Installer for Windows is not signed
No they where never signed. The issue is getting a cert. Once we have that singing is trivial. On 16 Oct 2015 03:11, "Mike Erwin" wrote: > Weren't other recent releases signed though? It is kind of unnerving when > Windows pops up a "Do you trust this Unknown Developer?" alert during > installation. > > Mike Erwin > musician, naturalist, pixel pusher, hacker extraordinaire > > On Thu, Oct 15, 2015 at 7:34 PM, Aaron Carlisle < > carlisle.aaro...@gmail.com> > wrote: > > > Yes Blender is a safe program > > > > On Thu, Oct 15, 2015 at 10:07 AM, Yury Baranov > > wrote: > > > > > Hi. I just mentioned that installer is not signed by developer. Is it > OK? > > > ___ > > > Bf-committers mailing list > > > Bf-committers@blender.org > > > http://lists.blender.org/mailman/listinfo/bf-committers > > > > > ___ > > Bf-committers mailing list > > Bf-committers@blender.org > > http://lists.blender.org/mailman/listinfo/bf-committers > > > ___ > Bf-committers mailing list > Bf-committers@blender.org > http://lists.blender.org/mailman/listinfo/bf-committers > ___ Bf-committers mailing list Bf-committers@blender.org http://lists.blender.org/mailman/listinfo/bf-committers
Re: [Bf-committers] Installer for Windows is not signed
And then there is the fact that anything that isn't stored in a smart card offers no accountability whatsoever as the cert can and will be mailed around with little to no regard for security (ie, not gpg signed nor encrypted, etc.), which means the signed binary has no meaning and only is being used to silence a windows warning. Being realistic, I can't see signing happening unless it becomes mandatory to run apps, or if someone pays for the cert and the process isn't terribly time consuming to the windows (and osx?) Devs. Heck, gpg is free, as is md5 and sha unix tools, and we don't even make signed checksum files available along side the downloads! Dan On Fri, Oct 16, 2015, 1:16 AM Martijn Berger wrote: > No they where never signed. The issue is getting a cert. Once we have that > singing is trivial. > On 16 Oct 2015 03:11, "Mike Erwin" wrote: > > > Weren't other recent releases signed though? It is kind of unnerving when > > Windows pops up a "Do you trust this Unknown Developer?" alert during > > installation. > > > > Mike Erwin > > musician, naturalist, pixel pusher, hacker extraordinaire > > > > On Thu, Oct 15, 2015 at 7:34 PM, Aaron Carlisle < > > carlisle.aaro...@gmail.com> > > wrote: > > > > > Yes Blender is a safe program > > > > > > On Thu, Oct 15, 2015 at 10:07 AM, Yury Baranov > > > wrote: > > > > > > > Hi. I just mentioned that installer is not signed by developer. Is it > > OK? > > > > ___ > > > > Bf-committers mailing list > > > > Bf-committers@blender.org > > > > http://lists.blender.org/mailman/listinfo/bf-committers > > > > > > > ___ > > > Bf-committers mailing list > > > Bf-committers@blender.org > > > http://lists.blender.org/mailman/listinfo/bf-committers > > > > > ___ > > Bf-committers mailing list > > Bf-committers@blender.org > > http://lists.blender.org/mailman/listinfo/bf-committers > > > ___ > Bf-committers mailing list > Bf-committers@blender.org > http://lists.blender.org/mailman/listinfo/bf-committers > ___ Bf-committers mailing list Bf-committers@blender.org http://lists.blender.org/mailman/listinfo/bf-committers
