NabokD / pockettube

The best way to manage your YouTube subscriptions
https://pockettube.io/
200 stars 9 forks source link

Sign Safari direct download version #123

Open mjgardner opened 2 weeks ago

mjgardner commented 2 weeks ago

I decided to host the latest version directly on my site, without the Apple store.

Originally posted by @NabokD in https://github.com/NabokD/pockettube/issues/116#issuecomment-2376541493

Many non-App Store macOS apps are signed and do not display malware warnings. Please sign the version on your website, regardless of whether it's available on the App Store.

NabokD commented 2 weeks ago

It's not a typical macOS app, it's an extension that is closely coupled with the browser and it's a trick, there is no way to sign the version. Safari rejects manually signed extension.

There is an open topic on the Apple developer forum from 2020, but there is still no way to do it: https://forums.developer.apple.com/forums/thread/667859

If Apple provides the way to do it, it'll be signed

mjgardner commented 2 weeks ago

there is no way to sign the version. Safari rejects manually signed extension.

Then please note on the website and in a README in the disk image how and why a user must manually approve the app along with the risks.