Re: Sierra Gatekeeper question.
Re: Sierra Gatekeeper question.
- Subject: Re: Sierra Gatekeeper question.
- From: Shane Stanley <email@hidden>
- Date: Thu, 16 Jun 2016 17:35:37 +1000
On 16 Jun 2016, at 4:45 PM, Brian Christmas <email@hidden> wrote:
In other words, can my unsigned App cause a security breach somehow?
It can be used in a security breach, yes. Only your client knows how likely that is, but I suspect they'd prefer you take all reasonable precautions. If I am solely responsible for the coding, storage, and transmitting of my Application(s), (7 in one bundle), in what way does codesigning improve the security of the installation and running of each of the 7 Apps, for one Client?
There are risks in transmission, but there are also risks after it's been installed. Slim, perhaps, but you need to weigh the risks and the cost of mitigating them.
If I archive and codesign my Mail Manager App, will the extra 6 Applications embedded in the contents, and eventually copied from the codesigned Mail Manager.app/contents to the Applications/Mail Manager folder during installation ALSO require separate code signing before being included inside the Apps contents?
I suspect so. If so, I don’t think I’ll want to pursue codesigning. It would be too unwieldy.
Not really.
I don’t want to pay a fee, then find codesigning for my particular circumstances is impractical. If I were going to distribute to many Clients, I would be willing to try and go the extra mile if I had to code sign everything individually. If I had to individually code sign, I presume I’d have to individually archive each, and somehow include each archive in the main App, and open them on installation somehow. Ouch.
No, it's not that hard. Xcode automatically signs project on build. In Script Editor, it's a simple export -- something you probably do to strip the source anyway. In Script Debugger 6, they will be signed each time you save.
|
_______________________________________________
Do not post admin requests to the list. They will be ignored.
applescriptobjc-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden