#msdyn365bc code signing question: Could I get a trusted signing account and sign app files on behalf of my clients? In other words, does the app file have to be signed by the actual publisher or does it simply need to have any digital signature?
Comments
Log in with your Bluesky account to leave a comment
You vouch for the app, by signing it. If you write or review the code, no problem. If it's doing something malicious, it's you, the signer, I will blame.
I know someone who claims they submitted apps to AppSource signed by someone else, and I believe the claim. Just looking for confirmation that this would be an acceptable practice
I'm quite sure it isn't changed from what @hougaard.bsky.social has mentioned in his video, that it's only verified that the App is signed, but not who signed the App file.
Comments
https://youtu.be/DgMsLLBRN0E?feature=shared&t=385