Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Swift release on Windows blocked by Windows Defender #518

Closed
vricosti opened this issue Apr 10, 2023 · 3 comments
Closed

Swift release on Windows blocked by Windows Defender #518

vricosti opened this issue Apr 10, 2023 · 3 comments

Comments

@vricosti
Copy link

Hello,

I wanted to test swift on Windows (swift-5.8-RELEASE-windows10.exe) but when I try to install it it get blocked by Windows Defender.
So can we trust your installer :-) ?
Wouldn't be possible to sign with an officiel certificate to avoid this ?

@compnerd
Copy link
Owner

What do you mean by official certificate? If you mean a non-self-signed one, that is something which requires a purchased certificate which no one has volunteered to cover the costs for. As such there is no way to get the certificate cross signed by a trusted root authority.

@compnerd compnerd closed this as not planned Won't fix, can't repro, duplicate, stale Apr 10, 2023
@vricosti
Copy link
Author

vricosti commented Apr 10, 2023

What do you mean by official certificate? If you mean a non-self-signed one, that is something which requires a purchased certificate which no one has volunteered to cover the costs for. As such there is no way to get the certificate cross signed by a trusted root authority.

Even if you sign it, it is not guaranteed that I won't see this message from MS, except by using an etended validation code signing certificated. You could also submit your app for malware analysis to Microsoft.
I am surprised that this exe is blocked by Defender, I think it's the firts time it happens.

https://stackoverflow.com/questions/48946680/how-to-avoid-the-windows-defender-smartscreen-prevented-an-unrecognized-app-fro/66582477#66582477

I will not install an exe blocked by Windows Defender so I will not test swift on Windows

@compnerd
Copy link
Owner

I don't think that the submitting the binary to Microsoft works, as we churn through them pretty rapidly (these are nightly snapshots after all). The EV certificate is the solution, but that is not exactly cheap, so that is currently not viable ATM. It is unfortunate that it will prevent you from using it. The alternative is that you can down the binaries directly from Azure if you like (the signature is the same) - but you know that the binaries that are being packaged are the ones built there.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants