Code-signing certs: June 1 deadline reminder

I still don't understand the benefits of certificates! Maybe
hackers can buy certicates, too. Or they can hack other valid
certificates. Is this some kind of legitimate extortion; an
extortionware?


--
John de la Torre
CA, USA

798/4 is 199.50, 519/3 is 173.00.. $26.50 difference per year. So I
think I'm going the $798 route for just a little more money, and I get
the hardware usb in year 4. My current certificate expires in August, so
might as well get it done now.

Not sure what the link is, but I did see where Sectigo bought ComodoCA.
Once they get a monopoly all bets are off and we get raked over the
coals with no place else to go I guess. Still, a couple hundred a year
isn't too bad.

I'm with Arnor, these guys are making a good living.

Ray Rippey
VMT Software

Hi Ray,

On 3/31/2023 14:47 PM, Ray Rippey wrote:
> 798/4 is 199.50, 519/3 is 173.00.. $26.50 difference per year. So I
> think I'm going the $798 route for just a little more money, and I get
> the hardware usb in year 4. My current certificate expires in August,
> so might as well get it done now.

Where did you see 798/4? I only saw the $519 for 3 years... 798 for 3
millisecond of computer time and 5 milliseconds to write it to USB then
pay $40 to have said USB shipped.... Yeah, not bad business model<g>
Allegedly they do some checking, but I knew a guy who worked at Comodo
and his comment on it was that "none of us know what we are doing or
supposed to be doing" That gave me a really fuzzy and warm feeling
about code signing companies<g> In my experience if I just ignored
their requests they got tired of me and sent me the certificate. In one
case they sent it to me and the day after 2 or 3 different people
emailed me for additional information. Sorry guys, you slept through
that one!<g>

Best regards,

--
Arnor Baldvinsson
Icetips Alta LLC

The $798 was on the Sectigo website if you purchase 4 years worth, you
can have the software certificate for 3 years, then the dongle on the
4th year included. But, my understanding is you have to order before
April 23, as that is the last time Certificates and be purchased as
software... after that you have to go with the dongle. So if you wait
until November, then you have to get the dongle.

When I first got my first certificate is was a real PITA. I had to
establish a Dun and Bradstreet record, show my business license, get a
phone call. With Sectigo I think we're starting all over with the
verification again. I figure once I'm verified with them, it's just a
matter of money after that. I never had trouble with Comodo after the
first time... I hope it's like that with Sectigo. I guess the comment
from Comodo is why they had to sell out?

I know one thing for sure, if my potential customers download our demo
and it gives a warning about possible malicious software because it's
not code signed, I lose a lot more money than this certificate costs.

Ray Rippey
VMT Software

Hi Ray,

On 3/31/2023 16:36 PM, Ray Rippey wrote:
> Comodo after the first time... I hope it's like that with Sectigo. I
> guess the comment from Comodo is why they had to sell out?

Wouldn't surprise me!

> I know one thing for sure, if my potential customers download our demo
> and it gives a warning about possible malicious software because it's
> not code signed, I lose a lot more money than this certificate costs.

Absolutely! It's not like we have a choice if we want to stay in this
business! There used to be a word for this... Yes, extortion!<g>

BTW: How DO you get the software certificate? Do you have to use IE,
or how does that work now?

Best regards,

--
Arnor Baldvinsson
Icetips Alta LLC

Hi Charles,

1. I tested out .NET MAUI. Well... a bit slow in running.

2. Subsequently tested blazor. Fast but utilizes plain
html/javascript/css for display and doesn’t have any out of the box
components aside from what comes with the default app template.

3. Taking course on flutter and dart now. Flutter utilizes material
design, and comes with a ton of nice looking widgets. Flutter is the
platform and dart is the language. It is fast.

Thanks.

Kelvin Chua
SINGAPORE


On 4/1/2023 6:55 AM, Charles Edmonds wrote:
> On 31 Mar 2023 11:44:42 -0400, Arnor Baldvinsson wrote:
>
>> Same here. See my reply to Jane. I think this ship has sailed. I'm
>> good until November so I'll start saving up<g>
>
> I think it is time to start delivering web apps that can run in a browser
> or on a mobile device and just be done with desktop apps or app store/play
> store apps.
>
> One code base and none of the code signing, hardware BS, AV problems, etc.
>
> Like the sage wisdom from "War Games" the only way to win is not to play!
>
> Besides the next generation of computer users is not smart enough to know
> the difference anyway!
>
> :-)
>
> Charles
>

And then you need to buy https certificates.


--
John de la Torre
CA, USA

> 1. I tested out .NET MAUI. Well... a bit slow in running.

Thanks for the report!

> 2. Subsequently tested blazor. Fast but utilizes plain
> html/javascript/css for display and doesnʼt have any out of the box
> components aside from what comes with the default app template.

I've heard that about it too.

> 3. Taking course on flutter and dart now. Flutter utilizes material
> design, and comes with a ton of nice looking widgets. Flutter is the
> platform and dart is the language. It is fast.

What are you using (or planning on using) for the datatbase/backend?

Charles

--
-------------------------------------------------------------------------------------------------------
Charles Edmonds

cjeByteMeSpammers@lansrad.com (remove the "ByteMeSpammers" to email me)

www.clarionproseries.com - ProDocument, ImageEx, ProScan, ProImage, ProPath
and other Clarion developer tools!
www.lansrad.com - "Intelligent Solutions for Universal Problems"
-------------------------------------------------------------------------------------------------------

I'll let you know. I just spent the $798... but on a Friday I won't
pursue it until Monday. I know I'm starting over for business
verification... so I've got to get that done before I get my
certificate. I'm curious if they need IE as well. I don't think I have
it on my Windows11 computer. Should be interesting. I just spent a
crapload of money with these people, I'm going to hold their feet to the
fire.

Ray Rippey
VMT Software

On 3/31/2023 3:37 PM, Arnor Baldvinsson wrote:
> BTW: How DO you get the software certificate? Do you have to use IE,
> or how does that work now?

> I still don't understand the benefits of certificates! Maybe
> hackers can buy certicates, too. Or they can hack other valid
> certificates. Is this some kind of legitimate extortion; an
> extortionware?
>
>

In the latest version of Windows 10 & 11, executable that are not code
signed cannot be run. You will have to switch off the UAC completely
and a couple of other settings...

Kelvin Chua