Issue 280: Installer should have digital signature
http://bitbucket.org/tortoisehg/stable/issue/280/installer-should-have-digital-signature

Adrian Buehlmann / abuehl on Fri, 12 Jun 2009 10:07:53 +0200:

Comment:
  Yeah, would be nice to have. But I thought a self signed certificate should 
only be
used for testing purposes?

Unfortunatley, real certificates are quite costly (I once bought some at work, 
but we stopped
doing so due to the cost). It would be really nice if there would be a CA that 
sponsors and
supports open source projects (usually, you have to provide corporate documents 
as proof --
not really a good fit for peer driven projects).

Without a proper certificate, signing probably isn't really worth the trouble. 
I wouldn't be
surprised if Windows would moan on self signed certificates thoroughly anyway
(I haven't checked and can't remember what it did back when I tried last time).

Peer, do you know how Windows reacts on self signed certs these days? Is it any 
better
than not signing at all?

What are other open source projects doing with regards to signing? Can we learn 
from
others :) ?


-- 
This is an issue notification from bitbucket.org.
You are receiving this either because you are the
owner of the issue, or you are following the issue.

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing 
server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
Tortoisehg-develop mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tortoisehg-develop

Reply via email to