Code Signing Certificates

What is Code Signing?


Code signing is the process of applying a digital signature to software/applications and is the virtual equivalent to shrink-wrapping CD based software for distribution. Code Signing enables the user downloading the “signed” software is legitimate, comes from a known software vendor and the code has not been tampered with since being published.

Why Should I Sign Code?

Customers who buy software from a retail store receive a shrink-wrapped package and can clearly determine who published the software and whether or not the package has been tampered with or opened. Therefore, the customer can easily make a decision whether or not to trust the software. Customers, who download software from the internet, need similar assurance. Code Signing provides this assurance and acts as a “virtual shrinkwrap” when distributing Software via the internet.

Unsigned Code

adobe-air-warning1.png

Unsigned applications display worrying security alerts to end users, warning them that the publisher of the application is unknown and advising them to only install applications from sources that they trust.

Code Signed with a Code Signing Certificate

adobe-air-warning2.png

Digitally signed applications prominently display the name of the publisher on the install screen, alleviating the end user's concern over only downloading from trusted sources.