Code Signing Certificate? - Just An Honest Guy Making Software

[Learjet 27]

Please forgive my ignorance on this topic.

Do any of you have a Code Signing Certificate and is it necessary?  Here's what I'm looking at: https://www.digicert.com/code-signing/code-signing.htm#digicert_reviews

 

I just completed my software and when you try to download it from my site Chrome and Windows label it as 'potentially dangerous' even though I know every single line of the code.  After download, when you try to install it stops you from installing says Windows protected you from a threat and you have to override the security in Windows to make it work.

 

There's no way that I could sell a product with these warnings due to the bad first impression that it would leave with customers, and I'm curious what is the right path to take go legit.  This is where I plan on making a living, I'm 100% in and need to know the best way to move forward.

 

Thank for your opinion!

 

Peace,

LJ 

[jason 101]

Great question here! We're all interested in what others have done to get around the overzealous security inside of Windows/Chrome.

[kev123 132]

As your application grows older it will build trust and stop triggering windows smart screen. Compile an new version thou and back at start and that being the whole point of certificates.

 

First things first Jason/seth need to confirm to yourself if a ubot exe can be signed otherwise wasted money. All of below i'm talking about is based on .net/mainstream languages executables.

 

-don't expect that annoying windows smartscreen message to go away straight away unless you get a EV cert but does after a while.

-get three year cert if you can afford.

-don't ever sign someone's software as a favour or to recoup cost of cert one bad app will kill your cert trust.

- won't make your software magically anti virus safe.

 

If this is your first app I would recommend not spending the money on a cert and concentrating on other things. try supplying your installer in a zip see if that helps with browser. Also the browser message will go away after a while

 

or

 

"My browser flags your software as not trusted"  -- "If you downloaded from are official website its a secure version, as the application is brand new chrome doesn't yet know the app and shows that warning as a precaution you can read more about these false positives at ***link to any of the 80,000 results for chrome false positive**** "

[Learjet 27]

Thanks Kev!

 

You really helped me out!  I saw some suggestions about adding your site to Google Webmaster Tools and I did that, which will hopefully help with the Chrome issue.

 

Additionally, I looked into getting a cert however, it's a bit confusing for a person who is admittedly ignorant on the whole process.

 

When I can afford it, should I get an EV Cert or just the run of the mill code signing cert?

Here's the page that I'm talking about: https://www.digicert.com/code-signing/ev-code-signing-compared.htm

As I stated earlier, this is my career and I plan on making a living out of programming and getting out of Front End Web Development, so all of your tips are taken to heart and appreciated.

Thanks again!

Respectfully,

LJ

[kev123 132]

You will get the benefits of a EV cert(instant windows smart trust) not long after with a normal cert has aged not worth apart from to look more professional.

Most people ignore the smart screen any how it will only be a small number of support calls. I would follow some of the tips to make your site more trusted with chrome as this what people are more likely to complain about.

 

thanks

9to5

[nichewebstrategies 12]

Just a heads up. If you are planning on code signing your ubot exe files you may be in for a surprise. I've tried signing basic bots using my code signing cert and they don't execute after the signing process.

 

No error, no message. They simply don't work.

 

If I build a custom c# app and code sign it, everything runs as expected, no issues.

 

I'd be curious if anyone else has run into the same issues and if it is even possible to get it working.

[davidford76 12]

I would just say to let your customers know that windows and also antivirus softwares will sometimes scan and show a error or problem with the software. Every time I go to run a new version of the current bot I'm working on my antivirus pipes up. It does it's scan and at first shows a memory error but after a few seconds it says it's safe and then you can click the x on the memory error message and use the bot. Just make sure you explain it in your sales video. You can even show them in the video while you install it on your own hard drive. That way they know it's just a minor thing and nothing to worry about.

[davidford76 12]

Another thought I just had is that you can also direct your customers to this very thread so they can see that it is a real ongoing issue that us software makers are having. You can put this thread in a pdf that says read here first and tell them about the issue and show them this thread. That way they can see that everything is just fine and they can use your programs just fine with no worries.

[Learjet 27]

Thanks David, I hadn't thought of that and I'm definitely thankful for the advice :-)

 

Peace,

LJ

[davidford76 12]

Thanks David, I hadn't thought of that and I'm definitely thankful for the advice :-)

 

Peace,

LJ

No problem just glad I can actually help back a little bit since I'm the main one needing help on here with my coding. That's why as soon as I make some money with my bots I am going to be buying some tutorial videos. I have watched several from youtube but there is only so much you can learn since the more advanced stuff is what people are selling. I plan on later one putting the info out for free once I learn a lot more. I believe in helping people learn and enabeling them to put into practice what they learn.

[Macster (UBotter Labs) 112]

I just posted this little tutorial on how to avoid antivirus alerts : http://network.ubotstudio.com/forum/index.php/topic/19547-how-to-avoid-antivirus-and-windows-alerts/

 

hope it helps.