Notepad++ drops code signing for its releases

Re:Notepad++ drops code signing for its releases by Sephr on Thursday March 07, 2019 @12:55PM (#19330289)

K-Software does not sell EV certificates for $85/yr. They start at $349/yr.

The parent comment's issue is that EV certificates are essentially required due to the poorly-designed SmartScreen reputation filter. The $85/yr certificate you're mentioning doesn't help solve this.

[ Parent | on HN ]

Re:Notepad++ drops code signing for its releases by GordonS on Thursday March 07, 2019 @01:20PM (#19330564)

I didn't know about the EV workaround and the OP didn't mention it.

I've never used an EV cert before for code signing. When we first started, I think Smartscreen was a nuisance for about 2 weeks, but years on, and I've never had to think about it again. Even when we've renewed the cert.

[ Parent | on HN ]

Re:Notepad++ drops code signing for its releases by Boulth on Thursday March 07, 2019 @01:45PM (#19330841)

Thanks for taking the time to describe your experience.

When you renewed the cert did you use the same key pair? (I'm wondering how does Microsoft correlate reputation).

[ Parent | on HN ]

Re:Notepad++ drops code signing for its releases by GordonS on Thursday March 07, 2019 @01:47PM (#19330869)

No, it was a new key pair each time. I'm also rather interested to know how it decides reputation though!

[ Parent | on HN ]

Re:Notepad++ drops code signing for its releases by Boulth on Thursday March 07, 2019 @02:34PM (#19331369)

Probably based on Subject name. It'd require a lot of money to verify that though (e.g. buying cert from another CA with the same name).

[ Parent | on HN ]