Hacker News Reader

Parent Full thread

setquk

Our EV cert shows an alert. Very fucking annoyed if I’m honest. And yes it was SHA-256.

Several days and a pile of cash fucking around with WIX and signtool for what exactly?

View on HN

Check this Stack overflow thread. For us it was cached SHA1 certificates in the cert chain:

https://security.stackexchange.com/questions/109629/deprecat...

But yeah, it's a pain..

Thanks for the link. I don't think it was that but I'm going to check it thoroughly anyway.

Thanks! I was considering an EV, but will now opt for the poor option.

It's essentially a protection racket with price segmentation.

It does feel like that. We don't actually issue a signed copy now and we have had precisely one complaint and that was from an enterprise customer. We suggested they downloaded it themselves and gave them the sha256sum of the MSI and they were happy with that.

Reply on news.ycombinator.com