Sign MacOS package to get rid of the warning and improve security

Features
1

Hello,

I just downloaded Everdo and will be evaluating it as a replacement of OmniFocus. But on MacOS, the download and install procedure is not very thrust worthy if you see dialogs like this:

56

Would you be able to become a registered Apple Developer so you can sign the DMG as well as the application with your Apple Developer ID?

Thanks,

Ringo

2

Yes I’m aware of this. To get rid of the warning we must sign the package with a key issued by Apple. Getting the key requires to jump through some hoops, which is why it hasn’t been done yet. It will be done in the near future though.

3

Forgot to mention.
As far as actual security goes, the DMG and windows packages already come signed with a key issued by DigiCert, which is one of the most trusted certificate authorities.

You can can verify the signature like this:

codesign -dv --verbose=4 /Applications/Everdo.app
1 Like
4

Hello @Andrei,

Any update on you becoming a registered Apple Developer? Currently, you are asking your Mac userbase to jump through hoops by lowering the security on our Macs to allow EverDo to get installed and run.

I am not feeling comfortable with lowering security.

Ringo

5

I understand the inconvenience. The native signing will be done soon.

6

Since 1.2.13, the dmg package is being signed with the native MacOS code signing cert.