
Even the random ones were generally okay. I remember being able to trust freeware / shareware downloads from the web.

I know the situation is less than ideal (to say the least). – Web based software that does not need a download, or installed as a PWA – Distributing software in source form, or on alternate platforms – Using “Stores” that validate your software (they take a 30% cut, but at least do offer some services in return) It is a bit steep for entry, but then there are other alternatives: Hosting, web certificates, etc, everything should come under $1k. Starting a company in Delaware costs $89, or a bit more if done thru an agent. Okay I am pessimistic, and I have been developing code for so many years, I too would want to easily spread my products.Īn EV certificate is only $400. How can we know a new developer took good precaution building their binaries? The system might be infected unbeknownst to them. The current state of the world not only has bad actors, but also lots of mistakes.

Unfortunate that it is, no certificate, or a cheap certificate accessible to everyone is almost similar. I must admit, I just skimped the summary, but the main point stands. Maybe because we run it on enough machines during development that we already reach the “safety” threshold 😉 We were never bothered by SmartScreen actually. This is not me, but it might as well have been: Once Symantec has confirmation of 5 machines it automatically whitelisted that version of the software. The only reason we got flagged as “possible malware” was because we had < 5 people with this version of the software installed running Symantec. It absolutely beat having to explain to our customers why we were “sending them virusses” This slowed us down a little bit but was the most practical approach. Eventually we just started to submit our software to whitelists like, wait a few days and then release the software. Even when we used digital signatures we would get blocked by the scanners the first few days as “possible malware”. Every year we updated some software with new insights and (tax) laws and then distrubuted that to our clients customers.

This also happened with Symantec AntiVirus (and Panda, and probably others).
