Adobe AIR-Is a self signed app OK?

I want to develop an app using Adobe AIR. But I have to sign it using a code signing certificate. I don't wan to buy a code signing certificate. Would it be OK if I distribute my app with a self-signed certificate?

This question and answers originated from www.stackoverflow.com
Question by (8/31/2010 10:15:06 PM)

Answer

The only difference between using a real certificate and a self-signed certificate is what the user sees in the initial installation dialog. With a real certificated they'll see a yellow "!" and the app will shown to be of "KNOWN" origin, and your company name will be shown. With a self-signed cert, there will be a red "?", and it will say the app's publisher is "UNKNOWN". You can see samples of the two dialogs at the very bottom of this page.

So realistically, it comes down to whether you're okay with people seeing a scary warning at install time. If you're only offering up the apps as a "use at your own risk" thing, or the app will be used mainly by a small group of people who already know who you are (an internal company app, e.g.) that may not be an issue, but if you hope for random internet people to come use your app and trust it, a cert may be a good idea.

Answer by

Find More Answers
Related Questions
  • Self-Signing J2me App

    I've created a small j2me app (for personal use) for sending text messages.This j2me app fetches the messages from my HTTP server and then send them to the fetched mobile number. Now the Problem is …
  • Adobe Air - Self signed certificate

    I need to generate a self signed Adobe Air certificate. How to do that? (I'm using Flash CS5 - AIR 2.0/2.5) I came across this tutorial - what stands ADT for and where do I enter the command line ? …
  • Generate certificate for signing AIR app

    How do I generate a self-signed certificate to sign an adobe AIR app? I'm using the maven flexmojos plugin. I've followed an openssl tutorial to generate a .p12, but now the mvn plugin /adt compiler…
  • Problem retrieving certificates for self signed jar

    I have a jar that's self signed with keys that I generated using the java keytool. At runtime I attempt to retrieve the certificates with the following code: ProtectionDomain pd = MyApplication.c…
  • commercial certificate for Adobe AIR

    I've been signing my Adobe AIR applications with a self-generated certificate, but now I'd like something that looks more official. What sort of commercial certificate should I get and from where? …
  • Cheapest Java Code Signing Certificate? (not self-signed)

    Does anyone know where I can get an inexpensive Java code signing certificate? Everywhere I look wants $200 to $300 per year! Unfortunately I cannot use a self-signed one, I'm trying to get rid of t…
  • Code signing certificates for Java, Adobe AIR, Authenticode, VBS - are they different?

    We have a code-signing certificate, purchased from GlobalSign for Authenticode signing (as they call it). Now we need to sign Java applet and soon Adobe AIR module (applet?). The question is: from t…
  • How do you create a self-signed certificate for use in object signing?

    I am trying to create an object-signing certificate myself instead of paying Verisign or some other company hundreds of dollars. I am using linux (specifically 64bit OpenSUSE 11.1) so it would be be…
  • Damaged AIR app after signing with renewed certificate

    Our code-signing certificate recently expired. It's been renewed, but now whenever I try to package the app with the renewed cert (whether I attempt a migration of the expired cert or not), after in…
  • creating a key and signing executable with signtool

    How would I sign a Visual C# executable? SignTool.exe can't find a certificate. How would I create a self signed key and certificate, and have signtool be able to see the certificate and use i…