include self-signed Security Certificate

[ArShui]

This is a good ideal for mydefrag to create a self-signed Security Certificate and use it to digital sign the installer and program, so that when we run the installer and program, the UAC in Vista/Seven will say this have a verified publisher instead of unkown publisher (when the self-signed security certificated was installed properly on our computers).

As a result, we will be more comfortable when the installer / program was not modified by other (assume the developer keeps the key in a safe place)

[jeroen]

Thanks for sharing your idea, I appreciate it. I am considering it, but MyDefrag is free software. A security certificate for signing software costs 180 dollars per year (Comodo code signing certificate). Perhaps somebody knows a cheaper certificate outlet?

[quanthero]

Thanks for sharing your idea, I appreciate it. I am considering it, but MyDefrag is free software. A security certificate for signing software costs 180 dollars per year (Comodo code signing certificate). Perhaps somebody knows a cheaper certificate outlet?

Isn't signing free if you use self-signed certificate?

[jeroen]

Isn't signing free if you use self-signed certificate?

Yes, it's free. But not recognized by Windows, it will popup the same nasty "unkown publisher" warning.

[amk]

To register signer of certificate it must by certified using another already registered.

[ArShui]

Isn't signing free if you use self-signed certificate?

Yes, it's free. But not recognized by Windows, it will popup the same nasty "unkown publisher" warning.

Of course, window will pop up a unknown publisher warning but user can install this security certificate (this mechanism was used by ext2fsd).
Doing so allow the user to know the program was not modified by other except the developer (which is the benefit when installing this self-sign certificate).

[jeroen]

Doing so allow the user to know the program was not modified by other except the developer

Are you thinking about viruses? They usually wrap themselves around a program, so running the program will first run the virus. And then the original program, which will show the original certificate. People will think that MyDefrag is the virus....

A certificate is useful for commercial programs, which are protected by a serial number or something similar. The owner of the program does not want a hacker to remove that protection. A certificate will help there. This of course does not apply to MyDefrag.