[Arqu]

That works for "us" HN geeks. The consumer market is all about convenience, and the monent the custoners have to go through some hoops a new company will pop up that will do it as a service which they then trust for doing it properly. And while I'm all for decentralizing power, I'd rather have 1 accountable company or a couple of them handle this compared to a bunch of small independent ones consodering they are less auditable and more open to skewing the system. Maybe something like the W3 consortium but we know how that turned out...

[darawk]

True, but there need not be a convenience tradeoff. Make Apple the default signing authority, but make it configurable by the user. Normal users need not ever see it, but they retain an opt out if it ever becomes necessary.

[Arnt]

Normal users see that when they're social-engineered into doing something they later regret.

[azinman2]

You can always disable gatekeeper and run some 3rd party version if you really wanted.

[Arqu]

Yeah, I would love that. Don't think that will happen any time soon unless legally obliged to.

[azinman2]

It’s trivial to disable gatekeeper. It’s just a radio button in settings.