• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Gatekeeper and code signing question
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Gatekeeper and code signing question


  • Subject: Gatekeeper and code signing question
  • From: Michael Domino <email@hidden>
  • Date: Thu, 09 Jun 2016 13:31:30 +0000
  • Thread-topic: Gatekeeper and code signing question

Hi all,

 

I have a signed app that had a flaw (something was changed after signing). When downloaded directly to a Mac from the server, the app was scanned on startup (the "Verifying" alert appears), the flaw was detected and the Gatekeeper assessment failed as damaged. However, when the same dmg is downloaded to a Windows system and then copied to the Mac, the app launches normally. The "Verifying" alert does not appear at all. So the questions are:

 

1. How can that happen?
2. Is that a security hole in the Gatekeeper system?

 

Thanks,
Michael

 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Xcode-users mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:

This email sent to email@hidden

  • Follow-Ups:
    • Re: Gatekeeper and code signing question
      • From: Stéphane Sudre <email@hidden>
  • Prev by Date: Re: Xcode docs
  • Next by Date: MobileIron Tunnel vs. Xcode device debugging
  • Previous by thread: Re: Xcode docs
  • Next by thread: Re: Gatekeeper and code signing question
  • Index(es):
    • Date
    • Thread