Information on the revocation of WinRAR 5.91 digital certificate

Post by gruez » Wed, Aug 26, 2020, 5:26 PM UTC

asdfasgasdgasdg wrote: post #33

pimterry wrote: post #24

> We think that revoking certificates based on questionable data discredits the certification system. It's hard to dispute this imo. There are many good reasons certificates should be revoked, but the reasoning should be 100% public information, for both the vendor and users who may have trusted the original certificate. I'm building a desktop app, and the process to even get a certificate is absurd. Each CA has thei…

There's another aspect of this situation that also discredits the system: that they can just go out and get a different cert from another vendor. How many such vendors are there? How long would it take for an actual bad actor to have all their certs discovered and revoked? If that time is long, then the certification process is of even more dubious value, since the bad guys would not be materially hindered by the cer…

Post by breakfastduck » Wed, Aug 26, 2020, 5:28 PM UTC

yjftsjthsd-h wrote: post #50

breakfastduck wrote: post #32

Earlier quoted context omitted.

It would be incredibly sad to see them go out of business, it's such an iconic piece of software.

> It would be incredibly sad to see them go out of business, it's such an iconic piece of software. Granted, it's also famous for (supposedly) nobody ever paying for it, which doesn't exactly lend itself to staying in business.

Post by cosmotic » Wed, Aug 26, 2020, 5:45 PM UTC

Post by ta89764894 » Wed, Aug 26, 2020, 6:54 PM UTC

jasperry wrote: post #36

theandrewbailey wrote: post #21

Earlier quoted context omitted.

Peazip: https://peazip.github.io/ I used to use 7zip, but switched when I discovered that Peazip doesn't extract to a temporary directory when extracting (thus, saving extra I/O work). It directly extracts into the target directory.

In response to WayToDoor, some archives contain thousands of files, and it's essentially doubling the number of filesystem operations by putting them in a temp directory and then moving. If the temp directory is on a different drive from the destination, then it's recopying all the data. I thought the creation of the files in the temp directory was an unavoidable artifact of how drag-and-drop worked in Windows. If pe…

Post by toast0 » Wed, Aug 26, 2020, 6:55 PM UTC

cm2187 wrote: post #2

I would have incremented the version number so the likes of Chocolatey would pick it up and replace the version installed with a revoked certificate as part of a regular update.