Code sign desktop edition

[janmarius]

We aim to code sign the desktop edition for general users, not just for specific companies like Equinor.

[eliasbruvik]

As it should be code signed for general users and not just Equinor's users, we can't use Equinor's internal service for code-signing.

It has also been discussed whether or not we need to code-sign it. For now it seems that users are able to run the installer, but they get a warning saying that the application can be harmful. This is normal for apps that are not code-signed.

If we want to code-sign it, these points needs to be answered:

• Does Equinor have agreements or restrictions on which certificate providers we can use?
• The certificate must be installed/stored on hardware tokens or HSMs that are then used in the signing process. Are there any restrictions around this?

[eliasbruvik]

Removing High Priority as nobody has come forward with any problems getting around the warning yet.

[robertbasti]

wait for some use case