1

Closed

Latest versions are not signed

description

I've downloaded versions 54 and 55 of the MSIs, and they are not signed. It feels icky to install something that's not signed nowadays, when can we expect new signed versions?
Closed Apr 29 at 2:31 PM by csdahlberg

comments

csdahlberg wrote Nov 29, 2016 at 2:44 AM

Previous versions (4.7.49 and earlier) were signed by a certificate owned by Andy Reeves. That certificate has expired, but even if it was still valid I don't have access to it.

I can create a self-signed cert and sign everything with that going forward, but that seemed to provide such minimal value as to not be worth it. Would you find signing via a self-signed cert (the private key of which I would protect) useful?

I'd be all for signing with a "real" certificate, but at the same time I don't particularly want to pay out-of-pocket to create and keep renewing it, especially when StyleCop will in all likelihood be replaced more and more with projects like StyleCopAnalyzers going forward. If a "real" certificate can be obtained for free (or maybe very inexpensively), or if donations can be collected to cover the cost of the certificate, I'd gladly use one.