Chris Wellons 4/25/2026

My brave new code-signing world

Read Original

The article describes the author's experience implementing code-signing for Windows software releases using Microsoft's Azure Artifact Signing service. It covers the motivation for code-signing (reputation with SmartScreen and security software), the costs (US$10/month Azure subscription), the complex Azure portal setup aided by AI, and the identity verification process limited to North America. The author introduces their own tool, aas-sign, a native multi-platform single-file application, contrasting it with alternatives like Azure CLI, Jsign, and SignTool.exe, which they criticize for poor engineering. The article includes practical usage modes (Laptop and Action) and is highly relevant to IT/technology, specifically software development and DevOps.

My brave new code-signing world

Comments

No comments yet

Be the first to share your thoughts!

Browser Extension

Get instant access to AllDevBlogs from your browser

Top of the Week

No top articles yet