gpraceman

I guess that I have been avoiding thinking about the upcoming release of Windows 8 and its possible impacts on the software that I sell. I didn't need to make any changes to my software when Win7 came out and I was hoping that the same would be true with Win8. Though, after reading this article, Win8 SmartScreen nudges software sellers to buy code signing certs, I am concerned that I will be forced to buy an extended validation code signing certificate. It is $450/yr from DigiCert or a whopping $995/yr from Symantec. That is a rather large cost for a very small company such as mine.

Has anyone had to deal with this issue yet? Just how hard is it for a user to get Win8 to install or run an app that is not EV digitally signed?

dilettante

There is a lot about Windows 8 that may still never see daylight, if only bcause nobody ever accepts Windows 8 and demand "downgrades" from new system manufacturers.

It does seem to be configurable: Windows 8 to feature native SmartScreen file checking.

I suspect so many ISVs will resist this new developer tax that nearly everyone will turn the feature off either manually or via Group Policy settings.


The motivation makes sense, but this "solution" seems dubious.

hDC_0

I don't know if this effects running things from the metro desktop,
but the smartscreen filter for IE is a registry setting.

I won't provide a direct link
but do a google search for "smart screen filter regedit"
and you'll find the setting.

You'll also may find an MSDN blog article about
"Mystery of the Forgetful Browser Settings"
concerning one of the Norton360 versions using this registry setting
to intentionally turn off smartscreen filtering.

Note: I agree with what was said above:
When I installed Windows Vista on my first computer it took
me barely a few minutes to realize it's binary form of UAC
definitely needed to be in the "off" setting and
every Windows Vista I installed after that got the same
revision (as well as installation of other software that provided
a more user friendly way to tweak things like that).

I also agree with dilettante that many users will probably choose
to exercise the "off" setting for smartscreen filtering.

Also note: the last time I used IE was IE5.5 under Windows 98.
I've been using non-ActiveX-enabled,
"non-BHO-malware-friendly" browsers ever since then.

Hopefully metro has a way to "dis-engage" IE from the desktop.
This off forum thread is along those lines.
--otherwise my use of that O/S may be for cross operating system testing
only.

Note: I think there is also the option to
disable metro IE and leave desktop IE, although for me some third party software
that offers the option to "completely remove IE from registry
and remove all IE installed files that are not critically needed for metro"
would be a great option as well.

I realize this is asking a lot..considering how deeply IE 10
is worked into metro and considering how it would severely
raise the rackels Microsoft, it would have to be a pretty bravo
outfit to release such a utility.

I know Chrome and Firefox have had multi-touch support on the desktop
for some time now, but don't know what the situation may be
for requiring IE on a windows phone with metro.
I know the Opera mobile has had some limitations in that context.

gpraceman

Unfortunately, many users just are not savvy enough to know what to turn off, if they even know that is an option. Most users will just get the warning from SmartScreen and then not trust to run the software.

dilettante

I really doubt this will be a problem. How many people are going to toss all of the software they have and buy new?

Unlike UAC which isn't an issue for properly written software I think this will be widely turned off.