Code signing - recommended cerificate provider?

27 Nov 2006 9:34 AM

John Blight

We're looking to sign not just executable files, but also Microsoft Visio
template (VST and VTX) and stencil (VSS) files, and possibly drawing files
(VSD and VDX), that contain VBA code. Such files may be in Visio 2002, 2003
and 2007 format.

Does anyone have any recommendations for a certificate provider? VeriSign
seem to be so much more expensive than others. Is there any justification for
this?

Thawte (www.thawte.com) offer a multi-purpose certificate that we should be
able to use for all of the above. Does anyone have experience of using their
certificates?

27 Nov 2006 10:05 AM

Dominick Baier

If their certificates support the "Code Signing" intended purpose and are
included in the trusted CA list of Windows - they are as good as every other
certificate.

-----
Dominick Baier (http://www.leastprivilege.com)

Show quoteHide quote

> We're looking to sign not just executable files, but also Microsoft
> Visio template (VST and VTX) and stencil (VSS) files, and possibly
> drawing files (VSD and VDX), that contain VBA code. Such files may be
> in Visio 2002, 2003 and 2007 format.
>
> Does anyone have any recommendations for a certificate provider?
> VeriSign seem to be so much more expensive than others. Is there any
> justification for this?
>
> Thawte (www.thawte.com) offer a multi-purpose certificate that we
> should be able to use for all of the above. Does anyone have
> experience of using their certificates?
>

27 Nov 2006 11:39 AM

Simon Mourier [SoftFluent]

Technically they are all the same, as Dominick says, but if you are an ISV
and want to integrate with some Microsoft Services such as WinQual
(winqual.microsoft.com), you *must* have a Verisign one. We found out that
after having purchased a thawte...

Simon.
www.softfluent.com

"Dominick Baier" <dbaier@pleasepleasenospam_leastprivilege.com> a écrit dans

le message de news: 51eb30482de58c8e02b1ce8e***@news.microsoft.com...
Show quoteHide quote

> If their certificates support the "Code Signing" intended purpose and are
> included in the trusted CA list of Windows - they are as good as every
> other certificate.
>
> -----
> Dominick Baier (http://www.leastprivilege.com)
>
>> We're looking to sign not just executable files, but also Microsoft
>> Visio template (VST and VTX) and stencil (VSS) files, and possibly
>> drawing files (VSD and VDX), that contain VBA code. Such files may be
>> in Visio 2002, 2003 and 2007 format.
>>
>> Does anyone have any recommendations for a certificate provider?
>> VeriSign seem to be so much more expensive than others. Is there any
>> justification for this?
>>
>> Thawte (www.thawte.com) offer a multi-purpose certificate that we
>> should be able to use for all of the above. Does anyone have
>> experience of using their certificates?
>>
>
>