Windows code signing of DLLs

------=_Part_284632_1655954206.1771455341606
Content-Type: multipart/alternative; 
	boundary="----=_Part_284633_476877901.1771455341606"

------=_Part_284633_476877901.1771455341606
Content-Type: text/plain; charset="UTF-8"

Windows executables in SciTE downloads will include digital signatures. The 
certificate used is from Certum and specifies that they are signed by "Open 
Source Developer, Neil Hodgson".

Downstream projects may choose to distribute the signed DLLs for Lexilla 
and Scintilla or distribute their own builds, potentially with their own 
signatures.

I can see arguments both for using binaries signed by me (original author 
with long internet history) or by the project (checked by project team with 
same signature over all files and known to work with project application).

While there could be specific Windows binary downloads for Lexilla.dll and 
Scintilla.dll (and 32-bit variants) or archives with both, these files will 
be available in SciTE downloads so its less effort for me to rely on those.

An archive with signed executables can be downloaded from
https://www.scintilla.org/wscite.zip

There will be a new release soon.

Neil

-- 
You received this message because you are subscribed to the Google Groups "scintilla-interest" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/d/msgid/scintilla-interest/a57aabe4-ac19-41c9-9e34-33f0f31383efn%40googlegroups.com.

------=_Part_284633_476877901.1771455341606
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div>Windows executables in SciTE downloads will include digital signatures=
. The certificate used is from Certum and specifies that they are signed by=
 "Open Source Developer, Neil Hodgson".</div><div><br /></div><div>Downstre=
am projects may choose to distribute the signed DLLs for Lexilla and Scinti=
lla or distribute their own builds, potentially with their own signatures.<=
/div><div><br /></div><div>I can see arguments both for using binaries sign=
ed by me (original author with long internet history) or by the project (ch=
ecked by project team with same signature over all files and known to work =
with project application).</div><div><br /></div><div>While there could be =
specific Windows binary downloads for Lexilla.dll and Scintilla.dll (and 32=
-bit variants) or archives with both, these files will be available in SciT=
E downloads so its less effort for me to rely on those.</div><div><br /></d=
iv><div>
<div>An archive with signed executables can be downloaded from</div><div><a=
 href=3D"https://www.scintilla.org/wscite.zip" rel=3D"noreferrer nofollow" =
style=3D"color: rgb(17, 85, 204); font-family: Arial, Helvetica, sans-serif=
; font-size: small; font-style: normal; font-variant-ligatures: normal; fon=
t-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-alig=
n: start; text-indent: 0px; text-transform: none; word-spacing: 0px; white-=
space: normal; background-color: rgb(255, 255, 255);" target=3D"_blank">htt=
ps://www.scintilla.org/<span>wsc</span><span></span><span>ite</span>.zip</a=
></div><div></div>

<br /></div><div>There will be a new release soon.</div><div><br /></div><d=
iv>Neil</div>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;scintilla-interest&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:[email protected]">=
[email protected]</a>.<br />
To view this discussion visit <a href=3D"https://groups.google.com/d/msgid/=
scintilla-interest/a57aabe4-ac19-41c9-9e34-33f0f31383efn%40googlegroups.com=
?utm_medium=3Demail&utm_source=3Dfooter">https://groups.google.com/d/msgid/=
scintilla-interest/a57aabe4-ac19-41c9-9e34-33f0f31383efn%40googlegroups.com=
</a>.<br />

------=_Part_284633_476877901.1771455341606--

------=_Part_284632_1655954206.1771455341606--