Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This is a gross mischaracterization of the thread. I replied to spondyl, not to you. Then you replied to me, so if anyone was "trying to pick a fight" involving me, it was you.

The crucial point is this: there are no builds that expire on macOS. Developer ID signed builds do not expire. Ad hoc signed builds do not expire. When the Developer ID code signing certificate expires, it cannot be used to sign new builds, but the old builds last forever. Build expiration is not a thing in any case.

So when spondryl asked, "Just to be clear, you're saying that .app bundles (and CLI tools) distributed outside of the App Store (and CLI tools) will continue to operate once the expiration date of the signing certificate has passed?" and you responded "No, sorry. That's not what I'm saying." that was actually confusing, not what I said.

The only reason the Logitech software died is that Logitech itself was doing some custom and badly designed validation above and beyond anything that macOS itself does. Your mention of App Store apps and CLI tools was itself a tangent and completely irrelevant to the issue.





So what happens when I codesign with the the --expires flag?

Do you? Does anyone? I see that the flag exists, but I've never seen anyone use it. That would seem a bit insane.

Yeah, it’s used for dog fooding or private distribution. It’s also used on iOS side-loading and test flight builds.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: