Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. Verisign!

Verisign!

Scheduled Pinned Locked Moved The Lounge
cryptographyquestion
22 Posts 14 Posters 4 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • Richard Andrew x64R Richard Andrew x64

    Drat! Verisign has increased the price to renew my code signing certificate from $400 to $500!!:mad: Do other developers here like to, or need to sign their code?

    -------------------------------- "All that is necessary for the forces of evil to win in the world is for enough good men to do nothing" -- Edmund Burke

    S Offline
    S Offline
    Shog9 0
    wrote on last edited by
    #6

    Richie308 wrote:

    Do other developers here like to, or need to sign their code?

    Not if it's costing me $400 i don't!

    1 Reply Last reply
    0
    • Richard Andrew x64R Richard Andrew x64

      Drat! Verisign has increased the price to renew my code signing certificate from $400 to $500!!:mad: Do other developers here like to, or need to sign their code?

      -------------------------------- "All that is necessary for the forces of evil to win in the world is for enough good men to do nothing" -- Edmund Burke

      B Offline
      B Offline
      Bassam Abdul Baki
      wrote on last edited by
      #7

      What about CACert[^]?


      There are II kinds of people in the world, those who understand binary and those who understand Roman numerals. Web - Blog - RSS - Math

      1 Reply Last reply
      0
      • A Anna Jayne Metcalfe

        We're signing all new code. It's rapidly becoming a requirement, IMHO. We're using Comodo[^], and it's considerably cheaper than Verisign - we bought a 2 year code signing cert last month for $210.33!

        Anna :rose: Linting the day away :cool: Anna's Place | Tears and Laughter "If mushy peas are the food of the devil, the stotty cake is the frisbee of God"

        S Offline
        S Offline
        Stick
        wrote on last edited by
        #8

        Just create your own cert., and have your users install it once, and then you are done.

        1 Reply Last reply
        0
        • Richard Andrew x64R Richard Andrew x64

          Drat! Verisign has increased the price to renew my code signing certificate from $400 to $500!!:mad: Do other developers here like to, or need to sign their code?

          -------------------------------- "All that is necessary for the forces of evil to win in the world is for enough good men to do nothing" -- Edmund Burke

          M Offline
          M Offline
          Michael Dunn
          wrote on last edited by
          #9

          MS's WER (error reporting) and Vista logo program require a Verisign cert; they won't take any other issuer's equally-valid cert, which is bullpuckey. :^)

          --Mike-- Visual C++ MVP :cool: LINKS~! Ericahist | PimpFish | CP SearchBar v3.0 | C++ Forum FAQ

          A D 2 Replies Last reply
          0
          • S Scott Dorman

            I'm not 100% sure of this, but I think what won't work with anything other than a Versign cert is the Windows Certification stuff, which is what is required on 64-bit XP and Vista for the Kernel Patch Prevention (PatchGuard) technology.

            ----------------------------- In just two days, tomorrow will be yesterday.

            A Offline
            A Offline
            Anna Jayne Metcalfe
            wrote on last edited by
            #10

            Do you mean the logo programme, or the OS? So far, all the machines we've tried it on (XP and Vista) have recognised and validated the certificate. I'm less worried about the logo programme right now as the test house would not be able to use our product without a third party's involvement (difficult to coordinate = expensive) anyway.

            Anna :rose: Linting the day away :cool: Anna's Place | Tears and Laughter "If mushy peas are the food of the devil, the stotty cake is the frisbee of God"

            S 1 Reply Last reply
            0
            • M Michael Dunn

              MS's WER (error reporting) and Vista logo program require a Verisign cert; they won't take any other issuer's equally-valid cert, which is bullpuckey. :^)

              --Mike-- Visual C++ MVP :cool: LINKS~! Ericahist | PimpFish | CP SearchBar v3.0 | C++ Forum FAQ

              A Offline
              A Offline
              Anna Jayne Metcalfe
              wrote on last edited by
              #11

              If true, that's crap. Do you have a link confirming this, by any chance?

              Anna :rose: Linting the day away :cool: Anna's Place | Tears and Laughter "If mushy peas are the food of the devil, the stotty cake is the frisbee of God"

              M 1 Reply Last reply
              0
              • M Michael Dunn

                MS's WER (error reporting) and Vista logo program require a Verisign cert; they won't take any other issuer's equally-valid cert, which is bullpuckey. :^)

                --Mike-- Visual C++ MVP :cool: LINKS~! Ericahist | PimpFish | CP SearchBar v3.0 | C++ Forum FAQ

                D Offline
                D Offline
                DarrollWalsh
                wrote on last edited by
                #12

                That's an anticompetitive move right there and we should sue them.

                Darroll Not one person lives in the present.

                1 Reply Last reply
                0
                • Richard Andrew x64R Richard Andrew x64

                  Drat! Verisign has increased the price to renew my code signing certificate from $400 to $500!!:mad: Do other developers here like to, or need to sign their code?

                  -------------------------------- "All that is necessary for the forces of evil to win in the world is for enough good men to do nothing" -- Edmund Burke

                  A Offline
                  A Offline
                  AdamNThompson
                  wrote on last edited by
                  #13

                  There are other alternatives that are way more cost efective. This is what my ISP sent me. "If you are unsure of which Authorized SSL provider to use, we recommend Geotrust, as their pricing is less than Verisign." their price is less than half. Hope this helps.

                  -fr33l0ader

                  1 Reply Last reply
                  0
                  • A Anna Jayne Metcalfe

                    If true, that's crap. Do you have a link confirming this, by any chance?

                    Anna :rose: Linting the day away :cool: Anna's Place | Tears and Laughter "If mushy peas are the food of the devil, the stotty cake is the frisbee of God"

                    M Offline
                    M Offline
                    Michael Dunn
                    wrote on last edited by
                    #14

                    I got that info during a phone conversation with the company that's handling developer relations for devs who want to get into the Vista logo program.

                    --Mike-- Visual C++ MVP :cool: LINKS~! Ericahist | PimpFish | CP SearchBar v3.0 | C++ Forum FAQ

                    A 1 Reply Last reply
                    0
                    • A Anna Jayne Metcalfe

                      Do you mean the logo programme, or the OS? So far, all the machines we've tried it on (XP and Vista) have recognised and validated the certificate. I'm less worried about the logo programme right now as the test house would not be able to use our product without a third party's involvement (difficult to coordinate = expensive) anyway.

                      Anna :rose: Linting the day away :cool: Anna's Place | Tears and Laughter "If mushy peas are the food of the devil, the stotty cake is the frisbee of God"

                      S Offline
                      S Offline
                      Scott Dorman
                      wrote on last edited by
                      #15

                      Yes, I was referring to the logo certification. On 64-bit (and only 64-bit) XP and Vista all drivers must be signed or the OS won't load them. This only applies to device drivers, so regular desktop applications and services don't have this restriction. Scott.

                      ----------------------------- In just two days, tomorrow will be yesterday.

                      1 Reply Last reply
                      0
                      • M Michael Dunn

                        I got that info during a phone conversation with the company that's handling developer relations for devs who want to get into the Vista logo program.

                        --Mike-- Visual C++ MVP :cool: LINKS~! Ericahist | PimpFish | CP SearchBar v3.0 | C++ Forum FAQ

                        A Offline
                        A Offline
                        Anna Jayne Metcalfe
                        wrote on last edited by
                        #16

                        Thanks for letting us know. :rose:

                        Anna :rose: Linting the day away :cool: Anna's Place | Tears and Laughter "If mushy peas are the food of the devil, the stotty cake is the frisbee of God"

                        1 Reply Last reply
                        0
                        • Richard Andrew x64R Richard Andrew x64

                          Drat! Verisign has increased the price to renew my code signing certificate from $400 to $500!!:mad: Do other developers here like to, or need to sign their code?

                          -------------------------------- "All that is necessary for the forces of evil to win in the world is for enough good men to do nothing" -- Edmund Burke

                          J Offline
                          J Offline
                          J Edwards
                          wrote on last edited by
                          #17

                          You think that is annoying - try signing for WM5 apps. The only option you have is through Verisign and not only do you pay for a cert you have to pay for every single exe, dll, and cab file that is signed (think it's about $30 each time). So if for instance you have an app with 4 dlls, and an exe and you want to package it in a cab then you are up for 6 x $30. If you have different builds for different languages or platforms then you just start multiplying. It's not the normal cert process so you can't use comodo etc. Obviously someone at MS holds a few shares in Verisign.

                          J C 2 Replies Last reply
                          0
                          • J J Edwards

                            You think that is annoying - try signing for WM5 apps. The only option you have is through Verisign and not only do you pay for a cert you have to pay for every single exe, dll, and cab file that is signed (think it's about $30 each time). So if for instance you have an app with 4 dlls, and an exe and you want to package it in a cab then you are up for 6 x $30. If you have different builds for different languages or platforms then you just start multiplying. It's not the normal cert process so you can't use comodo etc. Obviously someone at MS holds a few shares in Verisign.

                            J Offline
                            J Offline
                            J Edwards
                            wrote on last edited by
                            #18

                            Oh, not to mention that the cost just described is for a single release. If you start sending bug fixes or new versions then you pretty much go broke - not from the fees to verisign, but from the people you need to employee to run through the lengthy process of sending Versign each individual file needing to be signed and getting them to update it and send it back.

                            1 Reply Last reply
                            0
                            • J J Edwards

                              You think that is annoying - try signing for WM5 apps. The only option you have is through Verisign and not only do you pay for a cert you have to pay for every single exe, dll, and cab file that is signed (think it's about $30 each time). So if for instance you have an app with 4 dlls, and an exe and you want to package it in a cab then you are up for 6 x $30. If you have different builds for different languages or platforms then you just start multiplying. It's not the normal cert process so you can't use comodo etc. Obviously someone at MS holds a few shares in Verisign.

                              C Offline
                              C Offline
                              Chris S Kaiser
                              wrote on last edited by
                              #19

                              Not really an incentive to use multiple assemblies. But not quite costly enough to merge the source into a single binary. How nice of them.

                              What's in a sig? This statement is false. Build a bridge and get over it. ~ Chris Maunder

                              1 Reply Last reply
                              0
                              • Richard Andrew x64R Richard Andrew x64

                                Drat! Verisign has increased the price to renew my code signing certificate from $400 to $500!!:mad: Do other developers here like to, or need to sign their code?

                                -------------------------------- "All that is necessary for the forces of evil to win in the world is for enough good men to do nothing" -- Edmund Burke

                                M Offline
                                M Offline
                                Mindflow
                                wrote on last edited by
                                #20

                                Usually when a company increases costs it leaves more room for competition. This is a bit different while Microsoft play God. From what I read they seem to be breaking Monopoly laws. But then again, maybe they don't want just anybody to sign files. Maybe Verisign do things 100 times better than other companies. dunno :doh:

                                M 1 Reply Last reply
                                0
                                • M Mindflow

                                  Usually when a company increases costs it leaves more room for competition. This is a bit different while Microsoft play God. From what I read they seem to be breaking Monopoly laws. But then again, maybe they don't want just anybody to sign files. Maybe Verisign do things 100 times better than other companies. dunno :doh:

                                  M Offline
                                  M Offline
                                  Mindflow
                                  wrote on last edited by
                                  #21

                                  heheh :) I just got a visual... Maybe the Internet world will evolve like the human world where there is Rich and Poor, High price apps and low priced apps (free/open source), then very little in between.

                                  1 Reply Last reply
                                  0
                                  • A Anna Jayne Metcalfe

                                    We're signing all new code. It's rapidly becoming a requirement, IMHO. We're using Comodo[^], and it's considerably cheaper than Verisign - we bought a 2 year code signing cert last month for $210.33!

                                    Anna :rose: Linting the day away :cool: Anna's Place | Tears and Laughter "If mushy peas are the food of the devil, the stotty cake is the frisbee of God"

                                    J Offline
                                    J Offline
                                    Jwalant Natvarlal Soneji
                                    wrote on last edited by
                                    #22

                                    can also go for (n)code sollutions i think!

                                    Jwalant Soneji (BE IT) Mobile: +91 9969059127 http://jnsoneji.spaces.live.com http://jnsoneji.blogspot.com

                                    1 Reply Last reply
                                    0
                                    Reply
                                    • Reply as topic
                                    Log in to reply
                                    • Oldest to Newest
                                    • Newest to Oldest
                                    • Most Votes


                                    • Login

                                    • Don't have an account? Register

                                    • Login or register to search.
                                    • First post
                                      Last post
                                    0
                                    • Categories
                                    • Recent
                                    • Tags
                                    • Popular
                                    • World
                                    • Users
                                    • Groups