Code signing certificates



Will it be possible to request , code (java, MS…) signing certificates



No, this is only for SSL web server.



Actually, it’s not only for web servers, but any TLS usage, so also POP or SMTP servers.


well code signing requires a different level of trust and is usual bound to the natural or business entity and not just the domain, and therefore an automatic check isnt possible, meaning you wont get a code-signing so fast.


For signing Java certifying domain ownership might be sufficient in many cases.
If the first non-empty package starts with de.frame4j, e.g., the author should own the domain use it for distributing the software and would mention that in the jar’s manifest as Implementation-URL, Codebase and Caller-Allowable-Codebase.

closed #7