FireCubeStudios / Run

WinUI 3 Run
https://www.microsoft.com/store/apps/9NQGV64S5136
MIT License
157 stars 11 forks source link

Please don't have people install a custom root certificate #23

Closed GurliGebis closed 1 year ago

GurliGebis commented 1 year ago

It is a really bad practice to install custom root certificates, unless it is on a test machine or from somewhere you really trust. Doing this will allow anything signed with that certificate to be trusted by the entire system.

Telling people to install from the store is the way to go. If not, have them generate their own certificate and sign it with that - or use a trusted code signing certificate to sign the msix package, so people don't have to trust a custom root certificate.

FireCubeStudios commented 1 year ago

That's just the way sidoading works. Anyway a store release is out and preferred so I'm closing this issue