Software Security Blog

Code Signing with Microsoft Authenticode Authenticode, one of the most popular Microsoft technologies, is used in code-signing to identify who’s the publisher or developer of a given piece of software. It helps in signing several types of Windows scripts and executables such as .exe, .dll, .cab., .xpi & .ocx and assists in verifying that the…

Why Does Code Signing Matter? – Importance of Code Signing Certificate Understanding the importance of Code Signing In today’s day and age, most computing devices come with pre-loaded software. Whether we use a personal computer or mobile devices, users are constantly downloading other software to perform various functions or for better functionality. In some other…

Once you generate the Code Signing Certificate, we recommend you verify that your certificate is installed in the web-browser Certificate Store. Here, we will discuss how to verify Code Signing Certificates on web-browsers: How to Verify Code Signing Certificate in Internet Explorer: Step:1 In Control Panel, go to Network and Internet options. Click on Internet Options, and it…

It’s from the “SmartScreen Filter,” a Windows security feature with a slightly different name, also known as “Windows SmartScreen” or “Microsoft SmartScreen.” It was first developed & introduced in Internet Explorer 8, and it keeps on expanding with each progressive update. Nowadays, it’s not limited to just Internet Explorer, but it has become a part…

Does Code Signing Helps to Get Rid of Security Warnings? Yes! Unknown Publisher warning will go away once you sign your software with Code Signing Certificate, as they verify your identity as a publisher. Safe to Download Unsigned Software Warning Above image shows, how it allows to “Run” the program as its digitally signed by…

These days, almost every device we use is in some way a computer. From our vehicles to a small mobile device, buses, trains, watches, the television we watch each day. Computers are all around us. Below all the eye-catching features and GUIs, the code is doing its job, letting its users do whatever it is…

If you’re a software developer or a publisher who distributes their software or applications on third-party websites, then you already might be knowing how important it is to assure users that the software they are downloading is coming from a genuine person. Here, Code Signing Certificate plays this exact role of offering an assurance. By using a…

Steps to Sign and Timestamp a Java Jar File Here’s the step-by-step guide to Sign and Timestamp a Jar File. Step 1: After locating the certificate in your browser, export it with the private key while including all the certificates in the chain and exporting extended properties. A password will be required and .PFX will be the…

Signing a file with both SHA-256 & SHA1 Code Signing Certificates using Dual Signing Sometimes a situation occurs where you must sign an application using two different signatures (hashing algorithms.) For example, if you build an application that runs on both Windows 8 & earlier version like Windows Vista where Windows 8 supports SHA-256, and…

Note: Apple has tweaked the settings in GateKeeper, which changes the way OSX handles certificates from non-Apple vendors and tells the system to disallow ALL certificates that are not issued by Apple. After many years, Apple operating systems have started recognizing branded CA’s such as DigiCert or Comodo, though there’s no change in the default…

Code Signing Certificates are commonly used by software developers and publishers to provide unique identity through digital signature for various files such as applets, macros, plug-ins, codes, and other executable files before publishing on the internet. The main reason to do so is to confirm the integrity of the software, as Operating Systems, Software Applications,…