illume
commented
2 years ago - Electron docs on windows code signing
- There's a stack overflow Q&A on this showing how we can use a certificate. The TLDR; is we need a certificate from a CA, and then we can sign the executable from windows or linux.
- Electron Windows store guide seems quite dated... but maybe it's still valid.
- Submit files to Microsoft Defender SmartScreen for review documents how we can submit incorrectly classified apps for review.
Apparently not all certificates work to get rid of this MS/Edge warning, but (apparently) EV certificates do. Otherwise the application needs to "build reputation" by users clicking through the warnings. It's not clear to me if hosting the downloads on github contributes to the "bad reputation" and if hosting downloads elsewhere would be better.
Description
Try to download windows msi file with Edge, and it doesn't let you download it. [Note, it's possible to download Headlamp separately (with wget or something) and run the msi installer.]
Impact
Can not download/run windows Headlamp through Edge.
Environment and steps to reproduce
Download Headlamp windows msi from a release on github with Edge browser.
Expected behavior
That you can run installer, and then Headlamp (or just run Headlamp if it's a single file exe).
Additional information
I guess it probably needs to be signed or something. Additionally, msi is a deprecated installer type.
Here is info page (has stuff about reporting safe links): https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview