Code Signing

Most recent stories in Code Signing

• Microsoft digital certificates have once again been abused to sign malware

  

  Bruce Morton

  

  Microsoft digital certificates have once again been abused to sign malware

  Ars Technica - Dan Goodin

  Code-signing is supposed to make people safer. In this case, it made them less so. Microsoft has once again been caught allowing its legitimate …

• 

  Bruce Morton

  

  OV Code Signing Key Storage Requirement Changes Pushed to 2023

  thesslstore.com - Casey Crane

  Industry leaders decided to hold off on rolling out the new secure key storage requirements for organization validation (OV) code signing …

• New deadline is 1 June 2023

  

  Bruce Morton

  

  CA/Browser Forum Updates Requirements for Code Signing Certificate Private Keys - Entrust Blog

  entrust.com - Bruce Morton

  CA/Browser Forum Updates Requirements for Code Signing Certificate Private Keys The CA/Browser Forum has approved Ballot CSC-13 and has updated the …

• 

  Bruce Morton

  Ballot CSC-17: Subscriber Private Key Extension | CAB Forum

  cabforum.org - Corey Bonnell

  Notice of Review Period (Mailing list post is available here.) The IPR review period ended on October 28, 2022 and no exclusion notices were filed. The …

• 

  Bruce Morton

  

  Best Practices for Code Signing certificates

  entrust.com

  Best Practices for Code Signing Certificates The biggest issue with code signing is the protection of the private signing key associated with the code …

• 

  Bruce Morton

  

  Azure Code Signing, democratizing trust for developers and consumers

  microsoft.com

  Microsoft strives to increase not only the security of the ecosystem, but also maintain our commitment to an open and inclusive ecosystem. Code …