Page 1 of 3

PCG Tools trust

Posted: Fri Apr 20, 2012 11:45 am
by michelkeijzers
I hope you don't mind I create a separate thread for this issue but I would like to have reactions (actually confirmations) from users of PCG Tools.

When installing the application, I think everybody gets the warning that the publisher cannot be verified and to select to continue with the installation.

It seems some people do not trust the application and therefor do not install the application, which is a pity (for them and for my time spending programming it).

So I would very much appreciate if you can answer the following
questions:

1) Did you get this message about an anverified publisher?
2) Did you continue and install the application?
3) Have you noticed any problems (e.g. spyware/virus) etc?

Thank you in advance,

Michel



Background:

The reason for this is that I can link to this thread to show the application is safe.

There is a solution, shown in the following link:

http://stackoverflow.com/questions/1427 ... xecutables

However, to buy such a certificate costs 400 dollars a year (and that is way much more than I have received by donations), so I cannot afford this.

So I would very much appreciate if you can answer the follow

Posted: Fri Apr 20, 2012 12:41 pm
by robbie50
1.No
2.Yes, works perfect!! :D
3.No, no virus or spyware!! :!:


rob

Posted: Fri Apr 20, 2012 12:47 pm
by cello
1. Yes
2. Yes
3. No issues at all

Re: So I would very much appreciate if you can answer the fo

Posted: Fri Apr 20, 2012 12:50 pm
by ldascanio
1. I don't remember really.
2. Yes. No problem at all with the program
3. No issues here nor alerts with the antivirus installed. As far as I could see it's totally safe.

Rgds.

Posted: Fri Apr 20, 2012 1:01 pm
by McHale
I haven't been able to install the 1.x version yet as I've been out of town on business. When I return I'll give it a shot and report back.

-Mc

Posted: Fri Apr 20, 2012 1:15 pm
by Ksynth
1) Did you get this message about an unverified publisher?

No

2) Did you continue and install the application?

Yes


3) Have you noticed any problems (e.g. spyware/virus) etc?

No

Thanks Michel

Posted: Fri Apr 20, 2012 1:25 pm
by Francois
It would be unreasonable to ask you to have your app certified. Those who cannot trust that it will not harm their computers simply miss on a great utility. Their loss !

Posted: Fri Apr 20, 2012 1:50 pm
by michelkeijzers
Thanks for all reactions so far (but please reply if you haven't already).

Posted: Fri Apr 20, 2012 1:52 pm
by michelkeijzers
Francois wrote:It would be unreasonable to ask you to have your app certified. Those who cannot trust that it will not harm their computers simply miss on a great utility. Their loss !
I know, but I can imagine that if you get a message that an app might be harmfull/untrusted one might think twice before installing it.
But it seems to be a generic message that everybody gets unless 400$ is paid for a real certificate.

Posted: Fri Apr 20, 2012 2:03 pm
by AdDeRoo
Michel, same as above

1) Did you get this message about an unverified publisher?
No

2) Did you continue and install the application?
Yes

3) Have you noticed any problems (e.g. spyware/virus) etc?
No

I am very happy with it and all your efforts. Thanks!

Posted: Fri Apr 20, 2012 2:24 pm
by mathieumaes
I think I have an explanation, Michel.

You're using "ClickOnce" deployment, which is a recent platform to distribute applications, similar to those classic "installshield wizards".

ClickOnce has many good features, but the downside is that Microsoft forces you to sign the package with a certificate. Visual Studio creates a selfsigned certificate which allows you to deploy using ClickOnce, but most computers will give a warning.

To avoid the warning, you have to buy a application certificate which is signed by a "Certificate authority", such as Verisign.
Check this: http://www.symantec.com/verisign/code-s ... thenticode

The code signing certificate isn't cheap, and it's my oppinion that MS went too far by "forcing" this into ClickOnce. This really is a big cost for hobby programmers like you and me.

The other solution is to use the old platform for deployment by creating a Setup project and using the classic wizard for installing PCG Tools.

Posted: Fri Apr 20, 2012 2:40 pm
by michelkeijzers
Yes Mathieu, you are right ... in the link such a certificate is mentioned and it costs $400 per year of usage for me, so that is unaffordable for me (at least for this hobby project).

The reason I selected ClickOnce is to easily be able to convert it to a downloadable and automatically updatable application when I would put it online eventually and it automatically can install .NET Framework 4.

However, someone is checking out WiX which is a MS/Open source project that can create MSI installs.

But to be frankly, I want rather to update /add features instead of all these overhead items, allthough I know they are necessary.

Posted: Fri Apr 20, 2012 2:58 pm
by mathieumaes
Both those features - Installation from a website and automatically checking for updates - don't work without a "real" certificate.

Posted: Fri Apr 20, 2012 3:13 pm
by michelkeijzers
Yes I know but I don't know ifi those features can be performed with a non clickonce installation.

Posted: Fri Apr 20, 2012 3:57 pm
by keyplayer14
1. Yes
2. Yes
3. Absolutely no problems !

A great and highly useful little app, very much appreciated!