Why don't you sign your app?

[MaxITService]

Thank you for the awesome app. I'm studying the topic so I find it beneficial to talk about this with other people. I am not talking about paid certificate you pay every year for, but a self signed one. In my understanding it gives following benefits:

• Avoidance of setup file corruption, because there is a hash calculated and verified
• Someone might add your certificate into trusted ones, and this way the one would be notified if in future someone would try to identify as you
  -I heard that Microsoft might eventually recognize signature of widespread app, even if it is not backed up by common trusted CAs - is that so? At least signature warning would turn from red to yellow?

Even if those are not benefits, isn't it good practice of skills to sign something? I assume there is difficulty, that you have to have separate root CA and host CRL signed by it, right?

[johannesjo]

Just to give a brief answer. Code signing costs money and probably also a considerable amount of time to implement and maintain. There were signed releases for the macos store in the past and I spent way way to much time on getting things to work. I rather spent my time on something with more practical value for my users since it is also much more fun to do.