search

threefoldfoundation / tfchain

Official implementation of the ThreeFold blockchain
https://explorer.threefoldtoken.com
Apache License 2.0
13 stars 7 forks source link

Published windows binaries should be signed, and have proper installer. #42

Open FastGeert opened 6 years ago

FastGeert commented 6 years ago

I tried to use the downloadable windows binaries, but did not succeed in using them. Recent version of windows make it very complex to just run a downloaded executable.

FastGeert commented 6 years ago

I think its better to unpublish the windows binaries for now.

FastGeert commented 6 years ago

afbeelding

GlenDC commented 6 years ago

Asked about this in the Gopher slack channel, here is response of "John Arundel":

You could use GnuPG to create a detached signature: https://access.redhat.com/solutions/1541303 Or if it has to be the Microsoft-specific Authenticode thing, you have to apply for a signing certificate and use that: https://docs.microsoft.com/en-us/previous-versions/windows/internet-explorer/ie-developer/platform-apis/ms537361(v=vs.85) If they have a corporate security policy that doesn't allow unsigned binaries, it's presumably Authenticode they're after.

Does that info seem useful @FastGeert?

GlenDC commented 6 years ago

Closing this as wontfix for now. Should there ever be a sufficient amount of users requiring prebuilt windows releases, we can reopen this again, this time with properly signed builds.