electron-userland / electron-windows-store

:package: Turn Electron Apps into Windows AppX Packages
MIT License
678 stars 86 forks source link

Question: Is a code signing certificate needed if submitting app to Windows Store? #101

Open jamesjessian opened 6 years ago

jamesjessian commented 6 years ago

I was previously under the impression that an .appX to be submitted to the microsoft store would need to be signed with a code signing certificate (either standard or EV). However I have just read in the electron.build documentation that:

If the AppX package is meant for Windows Store distribution, no need to sign the package with any certificate. The Windows Store will take care of signing it with a Microsoft certificate during the submission process.

Does anyone have any experience with this? I do not want to advise my client that an EV Code Certificate is required if the $99 MS dev account is sufficient. Many thanks

paulvarache commented 5 years ago

A self signed developer certificate can be used to sign the .appx package. The Microsoft Store will sign the package with their own certificate before publishing your application

wobedi commented 2 years ago

@paulvarache I'm not sure I am following yet - could you elaborate?

What is the difference in the end-user experience for the following three scenarios: A) I buy an EV Code Certificate, sign the application with it, build the .appX and submit it to the Microsoft store B) I buy an OV Code Certificate, sign the application with it, build the .appX and submit it to the Microsoft store C) I don't buy any Code Certificate, I just build the .appX and submit it to the Microsoft store