Thank you for your answers @Rob, @Stephen and @John @Rob I don't understand either why i would sign files that are not ours, hence the question, so i know how the things are done.
So I guess there is no written rule about signing 3rd party libraries. I will stop signing all 3rd things and probably involve legal. On Fri, Sep 12, 2014 at 8:58 PM, John Cooper <jocoo...@jackhenry.com> wrote: > We sign only what we make and own. > > There is a school of thought in IP law that signing is equivalent to > branding and amounts to an appropriation of a third party's software > product and is a kin to redistributing it under your name without > authorization. > > This is very far from a settled area of law, but I wouldn't sign anything > you don't own or generate without talking to your legal first. > > -- > John Merryweather Cooper > Senior Software Engineer | Enterprise Service Applications | Continuing > Development > Jack Henry & Associates, Inc.® | Lenexa, KS 66214 | Ext: 431050 | > jocoo...@jackhenry.com > > > > -----Original Message----- > From: Tunney, Stephen [mailto:stephen.tun...@nuance.com] > Sent: Friday, September 12, 2014 1:46 PM > To: General discussion about the WiX toolset. > Subject: Re: [WiX-users] What should i sign (digitaly)? > > A signature doesn't just say "this is something I wrote" though. > > Authenticode *should* be used to ensure that what you have provided to > your customers hasn't been modified in any way (malicious or not). > Authenticode also assists with code getting around annoying anti-virus > behaviour as well. > > We sign all of our 3rd party libraries for this reason. > > Stephen Tunney > Nuance Communications, Inc. > Solutions Architect, Imaging Division > Waterloo, Ontario, Canada > stephen.tun...@nuance.com > 519-880-7463 Office > NUANCE.COM > The experience speaks for itself (tm) > > -----Original Message----- > From: Rob Mensching [mailto:r...@firegiant.com] > Sent: September-12-14 1:20 PM > To: General discussion about the WiX toolset. > Subject: Re: [WiX-users] What should i sign (digitaly)? > > I don't understand why you'd want to declare something is yours (i.e. put > your signature on it) when it isn't. > > _____________________________________________________________ > Short replies here. Complete answers over there: > http://www.firegiant.com/ > > > > -----Original Message----- > From: Ilir Bekteshi [mailto:ilir...@gmail.com] > Sent: Friday, September 12, 2014 1:09 AM > To: General discussion about the WiX toolset. > Subject: Re: [WiX-users] What should i sign (digitaly)? > > I think i didn't make myself clear, i do know how to sign the files. The > question was more like should i sign and timestamp Wix Toolset binaries > with my own certificate? > > > ------------------------------------------------------------------------------ > Want excitement? > Manually upgrade your production database. > When you want reliability, choose Perforce Perforce version control. > Predictably reliable. > > http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk > _______________________________________________ > WiX-users mailing list > WiX-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wix-users > > > ------------------------------------------------------------------------------ > Want excitement? > Manually upgrade your production database. > When you want reliability, choose Perforce Perforce version control. > Predictably reliable. > > http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk > _______________________________________________ > WiX-users mailing list > WiX-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wix-users > NOTICE: This electronic mail message and any files transmitted with it are > intended > exclusively for the individual or entity to which it is addressed. The > message, > together with any attachment, may contain confidential and/or privileged > information. > Any unauthorized review, use, printing, saving, copying, disclosure or > distribution > is strictly prohibited. If you have received this message in error, please > immediately advise the sender by reply email and delete all copies. > > > > ------------------------------------------------------------------------------ > Want excitement? > Manually upgrade your production database. > When you want reliability, choose Perforce > Perforce version control. Predictably reliable. > > http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk > _______________________________________________ > WiX-users mailing list > WiX-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wix-users > ------------------------------------------------------------------------------ Want excitement? Manually upgrade your production database. When you want reliability, choose Perforce Perforce version control. Predictably reliable. http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
