When distributing Software (by Microsoft ClickOnce), are there downsides on using an existing Driver Signing Certificate (from GoDaddy) for Code Signing?

有帮助吗?

解决方案

There shouldn't be any difference using a kernel code certficate instead of a normal Code-Signing-Certificate. They are both based on the Microsoft Authenticode system but they are - for what I know - on a different level of trust:

  • Code-Signing-Certificates: Class 2
  • Microsoft-Kernel Code: Class 3

(based on https://www.startssl.com/?app=40 and other CAs)

So basically it's like using a S/MIME Class 2 Certificate instead of Class 1. It offers more 'Security' (more owner validation) but does it job like the Class 1 one.

许可以下: CC-BY-SA归因
不隶属于 StackOverflow
scroll top