Don't use EV certificates

[d.healey]

If using a YubiKey with an EV certificate you will still run into the Microshaft smart screen popup. Go with the dongle recommended by the company you're buying the certificate from instead. Make sure the dongle doesn't use the ECC algorithm as this is the cause of the issue.

https://www.reddit.com/r/sysadmin/comments/17xbh80/sectigo_ecc_ev_code_signing_certificates_are/

[d.healey]

More info, apparently even the RSA key now doesn't guarantee you will pass smart screen with an EV certificate. So probably no point in getting an EV certificate at all. (They build reputation faster than an OV apparently, no one knows for sure because Microsoft keep it a secret).

[aaronventure]

@d-healey told ya

Just submit your files to Microsoft for verification against smart screen. Takes 3 weeks but I have found it eliminates it.

Doesn't even have to be signed.

[DanH]

@aaronventure how do you do this?

[aaronventure]

@DanH https://www.microsoft.com/en-us/wdsi/filesubmission

[clevername27]

It is possible on macOS, no idea on Windows. Personally, I would suggest avoiding it, as it's not how HISE's API is set up.

[d.healey]

@clevername27 said in Don't use EV certificates:

It is possible on macOS, no idea on Windows. Personally, I would suggest avoiding it, as it's not how HISE's API is set up.

What are you talking about? :confused_face:

[clevername27]

@d-healey That comment was meant for a different thread…no idea what happened.