Code Signing Certificate? EV? for software release to public

Last Updated:
Nov 2nd, 2020 11:52 pm

Tags:

SCORE

Reply to ThreadReply

Search this thread

Search this thread

Nov 2nd, 2020 8:34 am

gamerthumbs [OP]: Sr. Member; Jan 12, 2013; 640 posts; 233 upvotes; Toronto

Nov 2nd, 2020 8:34 am

Code Signing Certificate? EV? for software release to public

I need to add a certificate to coding to have software trusted across all browsers for release to public/consumer

What is the proper one for making software for Windows 10 apps/programs? Extended Validation Code Signing or just code validation? I think I need EV

I see cheap code signing certificates from GoDaddy for $246.99 CAD and expensive EV ones for $600 CAD per year.

Anyone do this before?

I also see the on this site https://comodosslstore.com/codesigning.aspx code signing is for individual developers. BUT EV is for organizations? I would need to make myself a organization for EV I think.

Last edited by gamerthumbs on Nov 2nd, 2020 8:58 am, edited 2 times in total.

4 replies

Nov 2nd, 2020 8:43 am

tebore: Deal Guru; Feb 9, 2006; 13045 posts; 7857 upvotes; Brampton

Nov 2nd, 2020 8:43 am

if you're only doing dev work just self sign and load the cert in to the browser.

+1

Nov 2nd, 2020 8:51 am

gamerthumbs [OP]: Sr. Member; Jan 12, 2013; 640 posts; 233 upvotes; Toronto

Nov 2nd, 2020 8:51 am

tebore wrote: ↑ if you're only doing dev work just self sign and load the cert in to the browser.

I want to release to public. I have software ready for download. Sorry I should not say I am software developing only

Nov 2nd, 2020 3:29 pm

onapping: Member; Jul 20, 2011; 309 posts; 142 upvotes; Toronto

Nov 2nd, 2020 3:29 pm

I think just Code signing should be enough. EV is extended validation which will validate your company and I dont think it is necessary for code signing and releasing to the public.

Nov 2nd, 2020 11:52 pm

kramer1: Deal Addict; Apr 29, 2018; 2328 posts; 1694 upvotes; Vancouver

Nov 2nd, 2020 11:52 pm

It really doesn't matter. Go for the minimum one that suits your purpose. The main thing is to choose a decent CA (GoDaddy is trustable) and you should be good.

The risk of having an un-secure CA is that if they get hacked, someone else can release software pretending to be you or modify your released code. The cert is to verify your identity and then to sign the software release, so it can't be modified at a later date/time.

It is the same deal as on HTTPS essentially. The cert confirms that you are connecting to the right server and the data being sent.

Can't Stop. Won't Stop. Game Stop

Reply to Thread

Top