Hacker News Reader

Comment by newaccount74 | Hacker News Reader

But macOS requires app notarisation. They again made it harder to run un-notarised apps this year. If you look at the iOS side, it's clear that Apple has no qualms adding content restrictions for app notarisation, and it is more than just a malware check. It could be just a question of time until Apple decides to stop notarising Mac apps that do not use App Store payments.

View on HN

Notarization isn’t the same, it just requires you have a developer certificate. There’s no restrictions on notarized apps that I’m aware of. It allows Apple to pull the cert if the app is found to be malware.

> There’s no restrictions on notarized apps that I’m aware of.

Notarized Mac apps have to used the hardened runtime, which comes with a few restrictions. For now, there are no content restrictions for notarized apps on the Mac. Let's hope it stays that way. But there are very significant content restrictions for notarized apps on iOS, and who knows how long until Apple introduces them on macOS as well.

Meh, Apple might be a little ahead of others, but all mainstream OSes and stores are basically headed this direction already. It’s just part modern security, part quality control, and part family & work friendliness. Most people on both sides actually want a walled garden. There will probably always be ways to run unsigned code and to get content that’s not approved by an app store, but maybe it’s fine if it’s ‘harder’ and not the default.

Yeah Windows does the same thing. It's something indie game devs run into. If you release on Steam, Steam launches your game. Otherwise you have to pay a certificate authority to sign your game or Windows Smart Screen will do the same "this code is sketchy. Are you really really really sure you want to run it?" thing MacOS does for non-notarized apps.

Reply on news.ycombinator.com