Elektrine lite

← Feed

@kirb@hachyderm.io

Post #1449433

2026-03-07 04:44 UTC

Actually, I don’t know what’s going on here. Both the previous and current version are signed, and it’s a valid cert from DigiCert, not some self-signed weird thing. Soooo… can I trust this or not?

Replies (2)

  • @kirb@hachyderm.io 2026-03-09 05:04

    Today, UAC has suddenly started being happy with the exact same binaries (this was happening for the delta patch and full installer, and @codecat repro’d with Sublime Text too). What happened to change this? Sublime HQ’s certificate is OV (organisation validation) rather than the way more expensive EV (extended validation), which means it has to build up reputation for SmartScreen to stop complaining that it’s infrequently downloaded. But I don’t think SmartScreen reputation affects UAC, right? It doesn’t make sense to me that it would, and it doesn’t happen for new versions of Legacy Update, which is also OV. So what could this have possibly been caused by? Was some Microsoft or DigiCert service down yesterday?

    Open ##1449434

  • @codecat@meow.social 2026-03-08 10:24

    @kirb Did you ever figure this out? I got curious about this as well: The certificate seems completely valid, even SignTool verify (with /pa flag) says it's valid, the chain looks okay.. I can't really explain why UAC is saying unknown publisher 🤔 Seems like it's been an issue for a long time though: https://github.com/sublimehq/sublime_text/issues/6581

    Open ##1449435