News for hackers. Stuff that matters.

A comment on Final Removal of Trust in WoSign and StartCom Certificates. Parent comment

Re:Final Removal of Trust in WoSign and StartCom Certificates by ktta on Friday July 07, 2017 @01:07PM (#14720027)
There's always GPG signing.
[ Parent | on HN ]
Re:Final Removal of Trust in WoSign and StartCom Certificates by khedoros1 on Friday July 07, 2017 @01:14PM (#14720094)
Does that provide the same integration into Windows that Authenticode does? Plus timestamp, dualsign, and cross-sign?
[ Parent | on HN ]
Re:Final Removal of Trust in WoSign and StartCom Certificates by ktta on Friday July 07, 2017 @01:30PM (#14720255)
>Does that provide the same integration into Windows that Authenticode does?

Nope

[ Parent | on HN ]
Re:Final Removal of Trust in WoSign and StartCom Certificates by tonyedgecombe on Friday July 07, 2017 @01:13PM (#14720081)
Doesn't solve the Windows scary warnings issue.
[ Parent | on HN ]
Re:Final Removal of Trust in WoSign and StartCom Certificates by justinclift on Sunday July 09, 2017 @01:57PM (#14730869)
Technically correct, but it solves a different problem. The StartCom signing cert is a solution solving the "big scary warning" problem on Windows for untrusted binaries.

GPG signing is suitable for a different group of users. :)

[ Parent | on HN ]