microsoft / microsoft/WindowsAppSDK

Self signed packaged apps - prompt users to trust certificate

Open
#1,480 13 comments 30 reactions 1 assignee Claimed by @cwruss View on GitHub
feature proposal
Dominant language
C++
Stars
4.7k
Forks
471
Avg merge
3d 13h
Merged PRs (30d)
28

Description

# Proposal: Self signed packaged apps - prompt users to trust certificate
Today it isn't straightforward to install self signed packaged apps. This has caused issues both to developers and users. Not everyone can afford code signing or the Store.

## Summary
When installing through App Installer, ask users if they want to trust the certificate (app developer) that's embedded in the package. This will make installing self-signed packages easier.

## Rationale

* Make it easier for users and developers
* More indie developers will start using MSIX reducing machine rot on user's machines
* Better reputation for "outside" UWP apps

## Scope

| Capability | Priority |
| :---------- | :------- |
| This proposal will allow developers to use MSIX without purchasing an expensive code signing certificate while still being secure | Must |
| This proposal will allow end users to install self-signed packaged apps effortlessly | Should |
| This proposal will allow developers to install self signed apps on user's machine without the user accepting to trust | Won't |

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.