Peter M. O’Donnell

@pmod What exactly is the security angle here?

@mjtsai Code signing with expiring certs? Have you not yet considered that some of the recent hiccups are related to compromised certs??

@pmod In what scenario would it be beneficial securitywise for Apple to disable their own installers that users downloaded from their store?

@mjtsai Because they had to retire a compromised certificate??

@pmod Sorry, not following you. Which certificate do you think was compromised? And how could that endanger the installer I already have?

@mjtsai Contemporary cert validation is a security feature, yeah?

@pmod In general, yes. But in this case I downloaded Apple’s installer from Apple’s server over HTTPS. So how is code signing helping me?