Now available from Symantec, Extended Validation (EV) Code Signing
offers a more secure process of signing code, allows for greater confidence in the integrity of your application, and provides a more frictionless experience for users downloading your application.
Symantec EV Code Signing provides the highest level of authentication available for a code signing certificate. Because EV authentication standards require a strict issuance and management process established by the CA/Browser Forum, EV Code Signing certificates provide an extra layer of protection for software developers and consumers. Unlike standard code signing certificates, EV certificates require a hardware token and associated PIN in order to sign code, introducing a more secure physical factor of authentication to the signing process. Introduction of this hardware element to the code signing process makes EV Code Signing certificate theft much more difficult, allowing browsers, operating systems, and users to be more confident in the identity of the developer and the integrity of the application. Due to more stringent developer authentication and more secure code signing, an application signed with an EV Code Signing certificate can be recognized and treated differently than an application with a traditional digital signature or lacking a digital signature.
The EV Code Signing process can also provide reputation service within browsers, operating systems and security software an additional source of confidence in applications signed with EV Code Signing certificates. For this product launch, we have partnered with Microsoft to integrate EV Code Signing certificate status with their SmartScreen® reputation services in Internet Explorer and Windows 8. Programs signed by an EV Code Signing certificate can immediately establish reputation with SmartScreen reputation services even if no prior reputation exists for that file or publisher. This means there are potentially fewer warning messages when a user tries to run your application. You can refer to Microsoft's developer pages for more information on SmartScreen reputation services in Internet Explorer and Windows 8.
Users can have more confidence when downloading applications from developers who have taken advantage of Symantec’s EV Code Signing Certificates. When users download your application they can feel safe, knowing that they are downloading an application from a developer that is trusted by Symantec, the world’s leading Certificate Authority.