gitlab-time-tracker-taskbar icon indicating copy to clipboard operation
gitlab-time-tracker-taskbar copied to clipboard

Published 20 hours ago • verified publisher icon kriskbx

Provide signed binaries and submit to snapcraft.io, Microsoft Store, Mac App Store

Open kriskbx opened this issue 6 years ago • 6 comments

kriskbx avatar Aug 27 '18 10:08 kriskbx

You probably need to add signing for this (I was just about to open a new ticket for that)

bobvandevijver avatar Aug 30 '18 18:08 bobvandevijver

Yeah, I'm aware of that. Unfortunately the cheapest open source certificate for code signing still costs about 30€/year plus additional 100€/year for Apples developer program. I'm currently looking into ways how to keep this project open source but pay for my upcoming expenses. If you have experience with that, feedback or tips would be highly appreciated.

kriskbx avatar Sep 01 '18 10:09 kriskbx

I have no experience with signed open source releases unfortunately 😞

bobvandevijver avatar Sep 04 '18 08:09 bobvandevijver

Looks like I there's no other way and I gotta pay these fees to create signed binaries. I won't do that at the moment, but my plan is to setup a Patreon page in the near future for all my open source work. Hopefully I can encourage people to donate at least 10€ / month in total to cover these expenses. Maybe I implement a small popup window like Sublime Text does... I favor this approach over monetizing it in the stores because I want everyone to freely use my software. If someone enjoys it it's on his or her own to support me and further development or not.

kriskbx avatar Sep 04 '18 17:09 kriskbx

You could distribute Windows packages through Chocolatey, afair, and MacOS packages through Homebrew. I just checked and neither does code signing, but at least they're free.

naturallymitchell avatar Sep 29 '18 06:09 naturallymitchell

I will eventually do that. But code signing is not about the distribution, but about convenience and trust:

screen shot 2018-10-03 at 21 06 07

On Mac OS you have to navigate to your /Applications folder, right click on the app icon and select open to be able to open the application and get rid of this warning. On Windows the procedure is easier but also bugging. Besides that code signing is there to ensure that the author of a specific software distributed it and no ones else. Especially in open source everyone can build binaries and sneak some bad code in there. With code signing the users of your software know exactly that the binary was built by you.

kriskbx avatar Oct 03 '18 19:10 kriskbx