atom feed98 messages in org.apache.infrastructure-devRe: Official code signing certificate
FromSent OnAttachments
25 earlier messages
William A Rowe JrJun 23, 2012 2:33 pm 
Sam RubyJun 23, 2012 2:40 pm 
Rob WeirJun 23, 2012 3:03 pm 
Scott DeboyJun 23, 2012 6:36 pm 
Sam RubyJun 23, 2012 6:44 pm 
Scott DeboyJun 23, 2012 7:02 pm 
Sam RubyJun 23, 2012 7:08 pm 
Scott DeboyJun 23, 2012 8:03 pm 
Dave FisherJun 23, 2012 8:08 pm 
Jürgen SchmidtJun 25, 2012 1:08 am 
Dave FisherJun 25, 2012 7:25 am 
Jürgen SchmidtJun 25, 2012 8:15 am 
Rob WeirJun 25, 2012 9:46 am 
William A. Rowe Jr.Jun 25, 2012 3:26 pm 
Dave FisherJun 25, 2012 4:13 pm 
Tony StevensonJun 26, 2012 12:12 am 
Jürgen SchmidtJul 13, 2012 5:03 am 
Jürgen SchmidtJul 15, 2012 11:18 pm 
Jürgen SchmidtJul 18, 2012 12:47 am 
OmJul 18, 2012 3:01 pm 
Rob WeirAug 3, 2012 6:23 am 
Jürgen SchmidtOct 5, 2012 2:31 am 
Daniel ShahafOct 5, 2012 4:51 am 
Bertrand DelacretazOct 16, 2012 6:23 am 
Jürgen SchmidtMar 20, 2013 2:28 am 
Daniel ShahafMar 20, 2013 1:37 pm 
Jürgen SchmidtMar 21, 2013 12:53 am 
Daniel ShahafMar 21, 2013 5:09 am 
Jürgen SchmidtMar 21, 2013 5:32 am 
Daniel ShahafMar 21, 2013 6:09 am 
Rob WeirMar 21, 2013 8:34 am 
Dennis E. HamiltonMar 21, 2013 9:57 am 
Daniel ShahafMar 21, 2013 3:17 pm 
Rob WeirMar 22, 2013 7:44 am 
Daniel ShahafMar 22, 2013 9:56 am 
Rob WeirMar 25, 2013 9:05 am 
Clint ModienMar 25, 2013 10:11 am 
Juergen SchmidtMar 25, 2013 2:04 pm 
Daniel ShahafMar 25, 2013 3:55 pm 
Daniel ShahafMar 25, 2013 3:57 pm 
Clint ModienMar 25, 2013 4:32 pm 
Jürgen SchmidtMar 26, 2013 2:40 am 
Daniel ShahafMar 26, 2013 4:49 am 
Daniel ShahafMar 26, 2013 4:55 am 
Daniel ShahafMar 26, 2013 5:23 am 
Daniel ShahafMar 26, 2013 12:57 pm 
Sander TemmeMar 27, 2013 4:19 am 
Dave FisherMar 30, 2013 12:14 pm 
Dennis E. HamiltonMar 30, 2013 1:29 pm 
Rob WeirMar 31, 2013 5:04 pm 
23 later messages
Subject:Re: Official code signing certificate
From:Jürgen Schmidt (jogi@gmail.com)
Date:Mar 20, 2013 2:28:00 am
List:org.apache.infrastructure-dev

Hi,

I reused this existing thread to restart the discussion about official code signing. In case of AOO we are moving towards our next major release AOO 4.0 which is planned for end if June. With over 40 million downloads in less than 1 year and most of them for Windows this topic is still very important for the project to provide the best user experience and the necessary trust in the product on modern Windows Systems like Windows 8.

On http://wiki.apache.org/general/ASFCodeSigning#preview I started to collect requirements and describe also the existing solution in AOO today and how it can be used in a more general approach.

The proposal is only one example but I think a practical one when I take all the security concerns into account. But of course it probably requires interaction with the trusted paid staff members.

I hope we can move this important topic forward and can find a satisfying solution for all ASF projects who need code signing.

Juergen