Shipping the Verus Mac app the way a stranger's Mac expects
Why the Verus Mac download is signed, notarised and stapled for distribution. Plus the certificate choice that gives it the longest life.
What I tried
The first Mac build of Verus was signed for development, which suits my own machine.
Why I chose differently
A download has to satisfy the checks a stranger's Mac makes. An app that holds message keys should carry nothing meant for debugging.
What I chose
I built a distribution pipeline: signed for release, debugging capabilities removed, notarised and stapled. One choice in Apple's certificate form decides whether a certificate lasts five years or expires early next year. I chose the five.
The principle
Check a release the way a stranger's computer will. Yours trusts you already.
- macOS
- Gatekeeper
- Notarisation
- Developer ID