OpenRefine/OpenRefine
Digitally sign openrefine.exe to eliminate extra security warnings on Windows
开放
#3,003 创建于 2020年7月28日
Platform: WindowsType: Feature Requesthelp wantedpackaging
仓库指标
- 星标
- (10,056 个星标)
- PR 合并指标
- (平均合并 4天 18小时) (30 天内合并 10 个 PR)
描述
Currently on Windows 10, clicking openrefine.exe will cause extra security warnings for Microsoft Defender SmartScreen.
Proposed solution
I think only 1 option exists:
- Since OpenRefine is downloaded from GitHub website and not through our own OpenRefine website the SmartScreen technology considers the openrefine.exe as unsafe since it is not digitally signed and verified with Microsoft and/or doesn't come from a trusted website.
Alternatives considered
- Bypassing SmartScreen every time to run - must click "More Info" on SmartScreen blocking dialog and then "Run Anyways"
- Bypassing SmartScreen permanently - After downloading and extracting the .zip file, right clicking on
openrefine.exeand clicking Unblock to add openrefine.exe to safe list for SmartScreen so that it does not block and instead considers it safe.
Additional context
Some non-exhaustive details I have found:
- MSIX - all packages inside get signed recursively https://learn.microsoft.com/en-us/windows/msix/package/signing-package-overview
- https://fb.smartscreen.microsoft.com/smartscreenfaq.aspx
- Windows App Certification Kit
- https://answers.microsoft.com/en-us/protect/forum/all/how-verifyed-publisher-status-makes-an-application/d4c81d5c-79bf-4caf-89da-5e4747b571e7