botpress / botpress-electron

This converts the Botpress binaries into a binary downloader / installer / runner
MIT License
0 stars 2 forks source link

Windows security warning still showing up #5

Closed ptrckbp closed 2 years ago

ptrckbp commented 2 years ago

Despite code signing, and a few weeks of downloads, there is still a security warning showing up when downloading and installing Botpress on windows. The warning is particularly scary in firefox.

image

ptrckbp commented 2 years ago

Likely found the issue and solved it.

Submitted a ticket to Microsoft just to be sure I got this right this time... And here's the answer :

Analyst comments:

The warning you experienced indicates that neither the application nor the signing certificate had established reputation with Microsoft Defender SmartScreen services at the time. We can botpress-setup-12.26.12-a.exe, (SHA256: bfea4e951ea9f683f0a3f1d8da586cacde6ff91751ac9c828694d23d6f7827bc), Clean has since established reputation and attempting to download or run the application should no longer show any warnings. The signing certificate (thumbprint 0422CB66BF0B3159B2DB081AC469230F79411153) is still in the process of establishing reputation. Once it does, all applications that are signed with that certificate should have a warn-free experience from the start.

Looks like we just have to wait for enough people to download and run Botpress, and then we'll be able to use our certificate for different versions of Botpress!

Thanks for the help Abe.

Closing now, if the issue persists, will re-open.