Code signing certificates


Will it be possible to request , code (java, MS…) signing certificates


1 Like

No, this is only for SSL web server.

Actually, it’s not only for web servers, but any TLS usage, so also POP or SMTP servers.


well code signing requires a different level of trust and is usual bound to the natural or business entity and not just the domain, and therefore an automatic check isnt possible, meaning you wont get a code-signing so fast.

For signing Java certifying domain ownership might be sufficient in many cases.
If the first non-empty package starts with de.frame4j, e.g., the author should own the domain use it for distributing the software and would mention that in the jar’s manifest as Implementation-URL, Codebase and Caller-Allowable-Codebase.

1 Like