https://bugs.kde.org/show_bug.cgi?id=422123
Urs Fleisch <uflei...@users.sourceforge.net> changed:
What |Removed |Added
----------------------------------------------------------------------------
Ever confirmed|0 |1
Status|REPORTED |CONFIRMED
--- Comment #1 from Urs Fleisch <uflei...@users.sourceforge.net> ---
I know about the code signing process of Apple, but there are two reasons why I
am not doing it:
- Enrolling as an Apple developper costs 99 USD per year. Kid3 is free software
and I do not earn money with it, so why should I give Apple 99 USD every year?
- Signing needs Apple hardware. I build all Kid3 binaries (Linux, Windows,
macOS, Android) on Linux using cross compilers, but to sign the final image, I
would have to pass it to a machine running macOS. So I would have to buy some
hardware from Apple (from time to time because after ten years I would not get
any security updates).
As you can see, the whole process is business for Apple.
I could provide a GPG signature of the dmg file (in the same way as for the
source code), but this is not convenient for the typical Mac user. Maybe KDE's
binary factory could sign DMGs, I will have to check if this would be possible.
--
You are receiving this mail because:
You are watching all bug changes.
