<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body><div><div style="font-family: Calibri,sans-serif; font-size: 11pt;">GStreamer is open source project, so any superstitious man can download sources and build binaries himself.</div></div><div dir="ltr"><hr>From: <a href="mailto:jerome-bugzilla@jeromelaheurte.net">Jérôme Laheurte</a> Sent: ‎5/‎20/‎2016 12:44 PM To: <a href="mailto:gstreamer-devel@lists.freedesktop.org">Discussion of the development of and with GStreamer</a> Subject: Re: Signing the distribution on Windows & Mac </div> > Le 20 mai 2016 à 10:43, Sebastian Dröge <sebastian@centricular.com> a écrit : > > On Fr, 2016-05-20 at 11:41 +0300, Kyrylo Polezhaiev wrote: >> but obviously that defeats the point of using keys in the first place >> :-) > > We could share them privately among the project members I guess. My 2 cents: the Mac developer program has a concept of « team » for sharing certificates, but each team member must be registered, so the cost bumps up to 99$ per developer per year. For Windows certificates, last time I had the dubious honor of having to get one, the process was a bit of a pain in the ass; you must use a specific version of IE, install various components, and use the exact same computer to renew it later; I’m not even sure there’s a way to « export » it to sign executables on a different machine, but I didn’t look long… Best regards Jérôme </body></html>