Repository navigation
Digitally sign Windows releases 1.3 #187
Description
Hi! Android-Dex v1.3 triggers a Microsoft Defender SmartScreen warning on my Windows 11 PC. Could you consider signing the Windows executables and installer with a trusted Authenticode certificate and timestamp? This would help verify the publisher and download integrity. I understand signing alone does not guarantee SmartScreen warnings disappear immediately. If releases are already signed, please document the expected publisher.
Some options worth considering to reduce signing costs:
-
SignPath Foundation: offers free code signing for eligible open-source projects: https://signpath.org/
It requires an OSI-approved license and verifiable builds from public source code. If Android-Dex remains closed-source, this option would not meet their requirements. -
Microsoft Store distribution using MSIX: Microsoft signs the submitted package for free, without requiring you to purchase a separate certificate for that distribution channel:
https://learn.microsoft.com/en-us/windows/msix/package/signing-package-overview
This would require checking MSIX compatibility and Store policies. It does not automatically sign the standalone EXE distributed through GitHub.
Either approach could help improve the installation experience. A self-signed certificate would not solve public trust warnings on users’ PCs, and signing outside the Store does not guarantee that SmartScreen warnings disappear immediately.
Excelent Proyect!
Thanks
Activity
Shrey113 commentedon Sep 25, 2026
@DarkCristian Thank you so much for the detailed information and for the kind words! I really appreciate you taking the time to explain the options.
I’ll definitely try to work on digitally signing the Windows releases. I’m also looking into free options because I’m a student and unfortunately don’t have much budget for a code-signing certificate right now. 😅
I’ll see if I can find a suitable free solution or another way to improve the trust and installation experience. Thanks again for the suggestion! ❤️
Shrey113 commentedon Oct 17, 2026
Hi @DarkCristian! 😊 Thanks again for your support! I’ve found a promising option through SignPath Foundation, and I’m working toward publishing the source code soon so Android-Dex can become eligible. I’ll keep you updated on the progress!