macOS: missing app signature after update

[teutat3s]

Dear Cliqz developers, thank you for this great browser.

I noticed a small issue when upgrading Cliqz on macOS through the built-in updater (Menu: About Cliqz):

I use the custom firewall LittleSnitch by obdev. It checks Apps' Signatures and after the two last updates it detected not only a change in Cliqz's App Signature after each update, it seems it went missing.

After downloading and installing Cliqz via its download page the App Signature seemed to be back in place.

In the detailed view in LittleSnitch I can then see the following:

“Cliqz” must be signed by Cliqz GmbH (2UYYSSHVUH) with identifier “org.mozilla.cliqz”

I hope I can help to track down why this signatures changes / goes missing if doing an update with the built-in updater.

This is on macOS mojave 10.14.6 with latest Cliqz 1.32.1 - 72.0.2+1.42.0.74 with english language.

Kind regards - teutat3s

[alver-cliqz]

Good day @teutat3s.

Thank you for informing. As you can check - we have signature on all our installers and updates (_CodeSignature/CodeResources). We will check information you provided and will try to fix this issue.

[teutat3s]

After an update today the same issue appeared - LittleSnitch reported a missing App Signature after using the built-in updater.

Attached is the CodeResources file found in Cliqz/Contents/_CodeSignature/ (renamed to .txt to make GitHub upload happy)

CodeResources.txt

LittleSnitch claims that the App was signed by Apple before, but that after the update this signature by Apple has gone missing...

[alver-cliqz]

Good day. Sorry, forget to mention - we found root of problem, will be fixed with next update. Thank you a lot for your help