Hacker News Reader

My point was I would trust someone who drops $20 more than I would trust someone who drops nothing.

$61/yr (USD) will get you an OV cert - there are 10% discount codes that are easy to find for these guys, and their list price is $67/yr:

https://codesigning.ksoftware.net/

But the Notepad++ guy will need a business registered with that name before he can obtain CN=Notepad++, no matter how much he's willing to pay.

View on HN

This certificate doesn't help to bypass UAC and "unsecure" prompt still be shown to the user.

That's incorrect. All code authenticode signing certificates (trusted by microsoft) turns the UAC prompt from yellow to blue. EV certificates is probably for auto-trust for smartscreen.

> EV certificates is probably for auto-trust for smartscreen.

Yes, that's correct. EV just skips the reputation building phase.

Source: https://blogs.msdn.microsoft.com/ie/2012/08/14/microsoft-sma...

> Programs signed by an EV code signing certificate can immediately establish reputation with SmartScreen reputation services even if no prior reputation exists for that file or publisher.

Only after you noticed that UAC color is blue instead of yellow i started to see difference.

No user will understand this though.

Up until reading this thread I wasn't even aware that there were different UAC colours.

Reply on news.ycombinator.com