I am new to Windows software development, so my apologies for any silly questions or general cluelessness. My question seems like it should be a FAQ, but I saw it neither in the WiX FAQ list nor in the past couple months of the list archives (I didn't see a good way to search the archive on the sourceforge forum site?), so I'll ask here.
I downloaded Wix35.msi from wix.codeplex.com, but when I went to execute the installer, I got a warning that the publisher could not be verified; the installer does not have a valid digital signature. At present, the best I can do to get a verified path to the WiX installer is to change the 'http' to 'https' in the download link I have, to be: https://download-codeplex.sec.s-msft.com/Download/Release?ProjectName=wix&DownloadId=204417&FileTime=129409234222130000&Build=19194 Can I do any better at present? It seems a little silly to use unsigned code (which might have been replaced by a man-in-the-middle attack, if I'm in a paranoid mood) to produce a binary which I am going to sign and distribute to my customers. I understand that it may not be feasible to sign the Wix35.msi installer for any number of reasons, but it would be nice if a checksum [0] of it could be posted under the wix.codeplex.com site which presents a Microsoft-signed SSL cert. (Maybe the default download link could be https, too?) Thanks, Ben Kaduk [0] If I can trust VMware's shared folders to not corrupt things, my copy of Wix35.msi has sha512sum 3c3bd95db9f8d419825f5d92a5dd125ecde92983c4ced82c5c1b327bb09dd171f756cd4a00d09f69c7a71f882453175e0e2cef55ce89c63c564aae559196a452 ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
