• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: Code Signing for Mac application
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Code Signing for Mac application


  • Subject: Re: Code Signing for Mac application
  • From: Graham Lee <email@hidden>
  • Date: Tue, 16 Feb 2010 15:20:28 +0000

On 16 Feb 2010, at 14:18, Paul Sanders wrote:

> AFAIK, the Mac does not check code signatures when it launches an app.  Even if it did, you would probably prefer it not to.  When an app is dragged to another folder, the Finder seems to add or modify something in the Resources folder, thus rendering the signature invalid.

If that really happens it would break a lot of apps for a lot of people - it'd be interesting to find out what your users are seeing. But probably no longer related to use of Xcode...there's an apple-cdsa list for discussing the security architecture (and the guy behind code signing hangs out there, he'd definitely want your bugreport number for that issue).

Cheers,
Graham.
--
Graham Lee
http://blog.securemacprogramming.com/
Coming soon - Professional Cocoa Application Security
http://eu.wiley.com/WileyCDA/WileyTitle/productCd-0470525959.html

 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Xcode-users mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:

This email sent to email@hidden

  • Follow-Ups:
    • Re: Code Signing for Mac application
      • From: Alastair Houghton <email@hidden>
    • Re: Code Signing for Mac application
      • From: "Paul Sanders" <email@hidden>
References: 
 >Code Signing for Mac application (From: Gabriele de Simone <email@hidden>)
 >Re: Code Signing for Mac application (From: "Paul Sanders" <email@hidden>)

  • Prev by Date: static libraries and missing symbols in release build
  • Next by Date: Re: Overkill - Declaration of 'XXX' shadows a member of 'this'
  • Previous by thread: Re: Code Signing for Mac application
  • Next by thread: Re: Code Signing for Mac application
  • Index(es):
    • Date
    • Thread