5 stories tagged code-signing, newest first.
875 points by hkc | 456 comments
Scott Helme blog post explaining how eight eMudhra intermediate CA private keys were single-byte P-384 values recoverable in milliseconds, and who remains exposed.
370 points by LorenDB | 261 comments
Blog post complaining about the difficulty of distributing a Go-built developer utility on macOS compared to Windows and Linux, due to Apple's Gatekeeper restrictions.
1213 points by super256 | 446 comments
SourceForge forum post by VeraCrypt developer Mounir Idrassi giving a project update, including that Microsoft terminated the account used to sign Windows drivers and the bootloader.
326 points by firexcy | 250 comments
A closed GitHub issue in the Homebrew/brew repository proposing removal of the --no-quarantine option, which allowed bypassing macOS Gatekeeper for unsigned casks.
362 points by latexr | 81 comments
Jeff Johnson's blog post arguing Apple quietly removed its 2020 promise to let macOS users opt out of OCSP Developer ID certificate checks.