indygreg / python-build-standalone

Produce redistributable builds of Python
BSD 3-Clause "New" or "Revised" License
1.75k stars 109 forks source link

Any plans on code signing the binary releases? #89

Closed hoolymama closed 2 years ago

hoolymama commented 2 years ago

Hi there,

Any plans on code signing the binary releases?

indygreg commented 2 years ago

My initial thinking was it wouldn't make sense to sign because the distributions would be redistributed as part of a larger application and would be signed as part of that larger application.

But I understand it can be useful to have pre-signed binaries available. I'll consider doing this as part of the release process. Although I don't have an EV signing certificate for Windows yet (but it is something I may acquire shortly).

hoolymama commented 2 years ago

That's great news! Thanks for the info. I shall pass it to my boss, who is the one with concerns.