search

FirebirdSQL / firebird

Firebird server, client and tools
https://firebirdsql.org
1.26k stars 217 forks source link

BUILDS: Provide digital signing on installation kits [CORE5996] #6246

Open firebird-automations opened 5 years ago

firebird-automations commented 5 years ago

Submitted by: @helebor

John Frankland in firebird-devel and several other forums: > What is the practice regarding digital signing of Firebird executables and installers etc.? > Some releases have been signed with a "Firebird Inc" certificate in the past but it seems signing is not always done. > Can signing be adopted as a policy?

Alex Peshkov in firebird-devel: It's really funny. Sha256 checksums are provided for snapshot builds but not for releases.

Sean Leyne in firebird-devel: SHA hashes are fine to validate downloads, but they are not the same as signing the install kits/executable.

Windows has increasingly made it difficult to install and/or run non-signed kits/executables.

hmoffatt commented 6 months ago

Are there any plans to address this? macOS too really discourages installation of unsigned applications.