Re: what is CodeResource? how to make bundles applescriptable?
Re: what is CodeResource? how to make bundles applescriptable?
- Subject: Re: what is CodeResource? how to make bundles applescriptable?
- From: Jeremy Reichman <email@hidden>
- Date: Mon, 21 Jul 2008 14:51:19 -0400
- Thread-topic: what is CodeResource? how to make bundles applescriptable?
On 7/18/2008 5:40:16 PM, "Philip Aker" <email@hidden> wrote:
>> Every time I look at that command, I think of "co-design," not "code."
>
> Me too. I think it's because the ascender on the 'd' delimits the sub-
> words more than anything else.
>
>
>> It would be reasonable to have a root CA
>
> $299.00 a year for a few bytes of encrypted text. Sounds like a scam
> to me.
There is no scam, from what I can tell. There is _no_ requirement for you to
buy certificates or a CA for Apple's code signing. You can do it all on your
own with Certificate Assistant -- or at the command line, if you prefer --
for free, not counting the value of your time.
Either self-signed or commercial certs can be trusted for the purposes of
code signing. All the signing does is provide identity, and where that leads
back to is up to the developer.
When you're doing it yourself you have more control (for the $$$) so I'd set
up a hierarchy with your own (self signed) root CA, at least one
intermediate, and then your actual signed code.
The point I was making before is that this level of misdirection means that
you can safely secure your root CA and should there be problems in the
future, you can expire/revoke your intermediate code signing cert. Or, you
can expand to have different certs for different purposes, like developing
vs. testing vs. production builds.
If you only had one level of certs, you wouldn't have the same flexibility
to change/revoke certs later should the need arise. Adding a layer helps
ensure you shouldn't need to revoke your root.
--
Jeremy Reichman
_______________________________________________
Do not post admin requests to the list. They will be ignored.
AppleScript-Users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
Archives: http://lists.apple.com/archives/applescript-users
This email sent to email@hidden