[BUG REPORT] Suspicious download Chrome - Windows

From an exchange with GPT4:

When Chrome or other browsers flag an MSI file as suspicious or block it after download, it’s typically due to a few common issues related to how the file is perceived by the browser’s security systems. Here are several reasons why this might be happening and how you can address them:

1. Reputation and SmartScreen Filter

SmartScreen: Microsoft's SmartScreen Filter, used by both Edge and Chrome, can block downloads that it doesn't recognize or that don't have an established reputation. This often affects new files or files coming from a new developer account that hasn't built trust yet.
Solution: Increase the reputation of your signing certificate by continuing to release and distribute software that does not get flagged as malware. Over time, as users download and use your software without issues, its reputation will grow.

2. Digital Signature and Certificate Authority

Certificate Strength: If your digital signature uses a certificate from a less recognized Certificate Authority (CA), or if the certificate lacks proper validation (e.g., not an Extended Validation (EV) certificate), browsers may be more cautious.
Solution: Use a certificate from a well-known and trusted CA. Consider obtaining an EV certificate if this continues to be a problem, as they typically confer a higher degree of trust.

3. Download Source

Unknown Source: If the MSI is hosted on a website that itself has a low reputation or is considered insecure (HTTP instead of HTTPS, for example), browsers may block downloads from these sources.
Solution: Make sure your MSI file is hosted on a secure (HTTPS), reputable website. Consider using well-known cloud hosting services that are generally trusted by security systems.

4. Content of the MSI File

Malware Detection: Even with a valid digital signature, if the MSI contains or behaves similarly to known malware, it can be flagged. This could be due to certain behaviors like modifying registry keys, installing in background, etc.
Solution: Ensure your software complies with best practices for security and privacy. Avoid any behavior that could be construed as malicious or invasive.

5. User Feedback

Feedback Loop: Sometimes downloads are flagged based purely on user feedback. If users frequently report an application, it can be flagged by browsers.
Solution: Provide clear, easily accessible user support and documentation. Encourage satisfied users to leave positive feedback if possible.

Next Steps

Test Downloads: Regularly download your own software using various browsers to check if it’s being flagged.
Engage with CA: If problems persist, engage with your certificate authority for advice on improving the trust level of your digital signatures.
Monitor and Respond: Keep an eye on security forums and your software’s reception to understand if there are specific reasons your application is being flagged.

If you've done all you can and the problem persists, consider reaching out to browser vendors directly for more specific guidance on why your application is being flagged and what steps you can take to remedy the situation.

edamametechnologies / edamame_helper