Hacker News Reader

I hoped with Lets Encrypt we were past the days of paying for cryptographic signatures, but Microsoft is keeping the legacy alive

View on HN

It's an absolute sham and Microsoft is using their market dominance to give us a worse product for more money.

I would love to see someone start a Windows app store that's based on domain validated code signing. Domains are better trust indicators than business names IMO.

AFAIK Lets Encrypt does not provide free code-signing certificates, but I did hear of a group that was trying to do that. Can't recall the name right now.

This one maybe? https://www.sigstore.dev/

> What's the current status?

> We’re working hard to release v1.0 in July.

Hopefully they are close to release.

Reply on news.ycombinator.com