We sign only what we make and own. There is a school of thought in IP law that signing is equivalent to branding and amounts to an appropriation of a third party's software product and is a kin to redistributing it under your name without authorization.
This is very far from a settled area of law, but I wouldn't sign anything you don't own or generate without talking to your legal first. -- John Merryweather Cooper Senior Software Engineer | Enterprise Service Applications | Continuing Development Jack Henry & Associates, Inc.® | Lenexa, KS 66214 | Ext: 431050 |jocoo...@jackhenry.com -----Original Message----- From: Tunney, Stephen [mailto:stephen.tun...@nuance.com] Sent: Friday, September 12, 2014 1:46 PM To: General discussion about the WiX toolset. Subject: Re: [WiX-users] What should i sign (digitaly)? A signature doesn't just say "this is something I wrote" though. Authenticode *should* be used to ensure that what you have provided to your customers hasn't been modified in any way (malicious or not). Authenticode also assists with code getting around annoying anti-virus behaviour as well. We sign all of our 3rd party libraries for this reason. Stephen Tunney Nuance Communications, Inc. Solutions Architect, Imaging Division Waterloo, Ontario, Canada stephen.tun...@nuance.com 519-880-7463 Office NUANCE.COM The experience speaks for itself (tm) -----Original Message----- From: Rob Mensching [mailto:r...@firegiant.com] Sent: September-12-14 1:20 PM To: General discussion about the WiX toolset. Subject: Re: [WiX-users] What should i sign (digitaly)? I don't understand why you'd want to declare something is yours (i.e. put your signature on it) when it isn't. _____________________________________________________________ Short replies here. Complete answers over there: http://www.firegiant.com/ -----Original Message----- From: Ilir Bekteshi [mailto:ilir...@gmail.com] Sent: Friday, September 12, 2014 1:09 AM To: General discussion about the WiX toolset. Subject: Re: [WiX-users] What should i sign (digitaly)? I think i didn't make myself clear, i do know how to sign the files. The question was more like should i sign and timestamp Wix Toolset binaries with my own certificate? ------------------------------------------------------------------------------ Want excitement? Manually upgrade your production database. When you want reliability, choose Perforce Perforce version control. Predictably reliable. http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users ------------------------------------------------------------------------------ Want excitement? Manually upgrade your production database. When you want reliability, choose Perforce Perforce version control. Predictably reliable. http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. ------------------------------------------------------------------------------ Want excitement? Manually upgrade your production database. When you want reliability, choose Perforce Perforce version control. Predictably reliable. http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
