[michihuber]

Also, distribution: Windows Defender requires code signing with an extended validation certificate, or going through the Windows Store. Otherwise users see a scary warning after installation how your app is probably a virus.

But using an EV cert means you cannot build on a CD service (it comes on a dongl). And users hate the Windows Store.

What am I missing as a mac person? I hear that most apps aren’t on the Windows Store. Is it normal to just have a virus warning and people ignore it anyway? Or can you just not distribute through a CD service?

[ugjka]

If your executable isn't signed not only users will get a warning but browsers such as Chrome won't let you download it.

Oddly enough malware distributors have no problem bypassing all this

[my123]

> Or can you just not distribute through a CD service?

You build on the CI, but then do the signing yourself on the machine which has the HSM... and then upload that as the release build...