Secure Coding mailing list archives

Re: Code Signing Processes


From: "Jared W. Robinson" <jwr () xmission com>
Date: Sat, 31 Jan 2004 16:44:47 +0000

On Thu, Jan 29, 2004 at 09:47:15AM -0600, Tegels, Kent wrote:
I'm interested in learning more from this community about others
practices, protocols, policies, thoughts and opinions about the Code
Signing Processes.

What are your questions about code signing? Here are some possible
subjects:
  - Algorithms
  - Tools (Commercial, Free and OSS) & their ease of use.
  - Toolkits and how good the APIs are.
  - Key management: protection, escrow, revocation, etc.
  - What to sign.
  - Operating System services that tie into code signing.
  - Infrastructure.

The more specific your questions, the more likely you are to get a
response, I would think.

- Jared








Current thread: