Notepad++ drops code signing for its releases

Post by SmellyGeekBoy » Thu, Mar 07, 2019, 5:37 PM UTC

daveFNbuck wrote: post #15

jimktrains2 wrote: post #5

> I realize that code signing certificate is just an overpriced masturbating toy of FOSS authors. I'm not sure what the author means by this.

The author is saying that signing certificates are something that FOSS authors enjoy using, but they have no practical purpose outside of that enjoyment.

Post by sodosopa » Thu, Mar 07, 2019, 5:38 PM UTC

EpicEng wrote: post #63

fjabre wrote: post #17

I remember the good old days when people were actually trusted to do their own research before downloading a potentially dangerous exe. Now all we have are app store and certificate rackets. Im looking at Google and Apple too. Shame on the industry for accepting 30% revenue share on their services. The idea of an app store is great but not when it excludes other legitimate ways of installing software on device. These…

"the good old days", as in, "the days when the average person had no freaking clue if something was safe, but installed it anyway because it's completely unreasonable to expect them to do otherwise"? If your security model is "do your research" then you're going to fail.

Post by jlongster » Thu, Mar 07, 2019, 5:41 PM UTC

eps wrote: post #18

gpm wrote: post #6

Earlier quoted context omitted.

"It's $828 per year" for ... a cert? What makes code signing this expensive?

Greed, mostly. Digicert lists EV code signing certs as $664/yr. But if you are to enter their site through a side door or just plainly cry into the support's jacket, then the price magically drops to $104/yr. And that's for an EV cert! So the only reason there are $600 certs is that there are people who do pay that.

Post by cwyers » Thu, Mar 07, 2019, 5:42 PM UTC

tomc1985 wrote: post #43

gruez wrote: post #40

Earlier quoted context omitted.

>I kind of see them like taxi medallions Taxi medallions are pricey because there's limited supply and high demand. Code signing certificates have limited demand and unlimited supply, but are expensive because they require manual verification (like EV certificates) and has a bunch of startup costs (to get included as a root).

Factors keep both items expensive, and both are effectively required for doing certain types of business.

Post by detaro » Thu, Mar 07, 2019, 5:44 PM UTC

thanksDr wrote: post #77

throwawaymath wrote: post #59

Earlier quoted context omitted.

Only if that's part of your definition of a good dev. I know plenty of good devs who downloaded software from Sourceforge back when it was big. Let me guess: you also dislike GitHub because it's closed, and wish people would distribute software from their own, self-hosted git repositories?

Devs get better by learning from mistakes. Sourceforge is a hostile source of malware : https://mail.gnome.org/archives/gimp-developer-list/2015-May... You mock those who desire freedom at your own risk. Github is microsoft now, and supporting it feeds the beast.