<?xml version="1.0" encoding="UTF-8"?><!-- generator="wordpress/2.3.3" -->
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	>
<channel>
	<title>Comments on: iPhone 2.0 SDK: How Signing Certificates Work</title>
	<link>http://www.roughlydrafted.com/2008/03/18/iphone-20-sdk-how-signing-certificates-work/</link>
	<description>Daniel Eran Dilger in San Francisco</description>
	<pubDate>Sun, 11 May 2008 23:00:22 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.3.3</generator>
		<item>
		<title>By: Five Factors Shifting the Future of Malware and Platform Security &#8212; RoughlyDrafted Magazine</title>
		<link>http://www.roughlydrafted.com/2008/03/18/iphone-20-sdk-how-signing-certificates-work/#comment-6930</link>
		<dc:creator>Five Factors Shifting the Future of Malware and Platform Security &#8212; RoughlyDrafted Magazine</dc:creator>
		<pubDate>Wed, 02 Apr 2008 10:47:27 +0000</pubDate>
		<guid>http://www.roughlydrafted.com/2008/03/18/iphone-20-sdk-how-signing-certificates-work/#comment-6930</guid>
		<description>[...] iPhone 2.0 SDK: How Signing Certificates Work iPhone 2.0 SDK: Video Games to Rival Nintendo DS, Sony PSP Video Game Consoles 2007: Wii, PS3 and the Death of Microsoft’s Xbox 360 [...]</description>
		<content:encoded><![CDATA[<p>[&#8230;] iPhone 2.0 SDK: How Signing Certificates Work iPhone 2.0 SDK: Video Games to Rival Nintendo DS, Sony PSP Video Game Consoles 2007: Wii, PS3 and the Death of Microsoft’s Xbox 360 [&#8230;]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: iPhone AppStore digital application signing explained &#124; iphone-unlock.ch</title>
		<link>http://www.roughlydrafted.com/2008/03/18/iphone-20-sdk-how-signing-certificates-work/#comment-6508</link>
		<dc:creator>iPhone AppStore digital application signing explained &#124; iphone-unlock.ch</dc:creator>
		<pubDate>Mon, 24 Mar 2008 19:43:41 +0000</pubDate>
		<guid>http://www.roughlydrafted.com/2008/03/18/iphone-20-sdk-how-signing-certificates-work/#comment-6508</guid>
		<description>[...] to Daniel Eran Dilger’s “Roughly Drafted” Apple will use a combination of digital application signatures and the FairPlay DRM that they [...]</description>
		<content:encoded><![CDATA[<p>[&#8230;] to Daniel Eran Dilger’s “Roughly Drafted” Apple will use a combination of digital application signatures and the FairPlay DRM that they [&#8230;]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: &#187; iPhone AppStore digital application signing explained - iPhone World</title>
		<link>http://www.roughlydrafted.com/2008/03/18/iphone-20-sdk-how-signing-certificates-work/#comment-6471</link>
		<dc:creator>&#187; iPhone AppStore digital application signing explained - iPhone World</dc:creator>
		<pubDate>Sat, 22 Mar 2008 16:26:25 +0000</pubDate>
		<guid>http://www.roughlydrafted.com/2008/03/18/iphone-20-sdk-how-signing-certificates-work/#comment-6471</guid>
		<description>[...] to Daniel Eran Dilger&#8217;s &#8220;Roughly Drafted&#8221; Apple will use a combination of digital application signatures and the FairPlay DRM that [...]</description>
		<content:encoded><![CDATA[<p>[&#8230;] to Daniel Eran Dilger&#8217;s &#8220;Roughly Drafted&#8221; Apple will use a combination of digital application signatures and the FairPlay DRM that [&#8230;]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: iPhone 2.0 SDK: Video Games to Rival Nintendo DS, Sony PSP &#8212; RoughlyDrafted Magazine</title>
		<link>http://www.roughlydrafted.com/2008/03/18/iphone-20-sdk-how-signing-certificates-work/#comment-6461</link>
		<dc:creator>iPhone 2.0 SDK: Video Games to Rival Nintendo DS, Sony PSP &#8212; RoughlyDrafted Magazine</dc:creator>
		<pubDate>Sat, 22 Mar 2008 05:07:50 +0000</pubDate>
		<guid>http://www.roughlydrafted.com/2008/03/18/iphone-20-sdk-how-signing-certificates-work/#comment-6461</guid>
		<description>[...] iPhone 2.0 SDK: How Signing Certificates Work [...]</description>
		<content:encoded><![CDATA[<p>[&#8230;] iPhone 2.0 SDK: How Signing Certificates Work [&#8230;]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: kdarling</title>
		<link>http://www.roughlydrafted.com/2008/03/18/iphone-20-sdk-how-signing-certificates-work/#comment-6386</link>
		<dc:creator>kdarling</dc:creator>
		<pubDate>Thu, 20 Mar 2008 02:26:25 +0000</pubDate>
		<guid>http://www.roughlydrafted.com/2008/03/18/iphone-20-sdk-how-signing-certificates-work/#comment-6386</guid>
		<description>The RIM info is out of date.  Certs are now only $20 for essentially unlimited signing.

Does the iPhone $99 need to be paid each year, forever?</description>
		<content:encoded><![CDATA[<p>The RIM info is out of date.  Certs are now only $20 for essentially unlimited signing.</p>
<p>Does the iPhone $99 need to be paid each year, forever?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: CasdraBlog &#187; Blog Archive &#187; links for 2008-03-19</title>
		<link>http://www.roughlydrafted.com/2008/03/18/iphone-20-sdk-how-signing-certificates-work/#comment-6362</link>
		<dc:creator>CasdraBlog &#187; Blog Archive &#187; links for 2008-03-19</dc:creator>
		<pubDate>Wed, 19 Mar 2008 11:23:10 +0000</pubDate>
		<guid>http://www.roughlydrafted.com/2008/03/18/iphone-20-sdk-how-signing-certificates-work/#comment-6362</guid>
		<description>[...]  iPhone 2.0 SDK: How Signing Certificates Work — RoughlyDrafted Magazine (tags: iphone) [...]</description>
		<content:encoded><![CDATA[<p>[&#8230;]  iPhone 2.0 SDK: How Signing Certificates Work — RoughlyDrafted Magazine (tags: iphone) [&#8230;]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Roger Kay&#8217;s Wax Wings of Icarus vs the Flight of Apple &#8212; RoughlyDrafted Magazine</title>
		<link>http://www.roughlydrafted.com/2008/03/18/iphone-20-sdk-how-signing-certificates-work/#comment-6352</link>
		<dc:creator>Roger Kay&#8217;s Wax Wings of Icarus vs the Flight of Apple &#8212; RoughlyDrafted Magazine</dc:creator>
		<pubDate>Wed, 19 Mar 2008 04:58:28 +0000</pubDate>
		<guid>http://www.roughlydrafted.com/2008/03/18/iphone-20-sdk-how-signing-certificates-work/#comment-6352</guid>
		<description>[...] &#8592; iPhone 2.0 SDK: How Signing Certificates Work [...]</description>
		<content:encoded><![CDATA[<p>[&#8230;] &larr; iPhone 2.0 SDK: How Signing Certificates Work [&#8230;]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: GQB</title>
		<link>http://www.roughlydrafted.com/2008/03/18/iphone-20-sdk-how-signing-certificates-work/#comment-6351</link>
		<dc:creator>GQB</dc:creator>
		<pubDate>Wed, 19 Mar 2008 03:53:36 +0000</pubDate>
		<guid>http://www.roughlydrafted.com/2008/03/18/iphone-20-sdk-how-signing-certificates-work/#comment-6351</guid>
		<description>@ Brau: "If the products are guaranteed good, the buyers will choose them first, just like many have chosen paid iTunes downloads over P2P (free). Isn’t that good enough and what we all want?

The only “problem” I foresee is the precedent it sets where human morality based responses inevitably conspire to assert that any software not signed by the manufacturer must be “bad” or “illegal” and therefore simply used for nefarious purpose"

While I share your nostalgia for days when anonymous trust was shared amongst a small, mutually known community, those days are long gone.
To answer your question, 'Isn't that good enough", the answer is a resounding "NO!".
The modern stakes are too high to settle for anything less than authenticity, integrity, and non-repudiation. "Ham-Fisted" is hyperbole, comparing Apple's responsibility to provide a secure environment for its customers to monomaniacal political repression.
Personally, I'll settle for no less than what Apple is requiring, and I welcome it.</description>
		<content:encoded><![CDATA[<p>@ Brau: &#8220;If the products are guaranteed good, the buyers will choose them first, just like many have chosen paid iTunes downloads over P2P (free). Isn’t that good enough and what we all want?</p>
<p>The only “problem” I foresee is the precedent it sets where human morality based responses inevitably conspire to assert that any software not signed by the manufacturer must be “bad” or “illegal” and therefore simply used for nefarious purpose&#8221;</p>
<p>While I share your nostalgia for days when anonymous trust was shared amongst a small, mutually known community, those days are long gone.<br />
To answer your question, &#8216;Isn&#8217;t that good enough&#8221;, the answer is a resounding &#8220;NO!&#8221;.<br />
The modern stakes are too high to settle for anything less than authenticity, integrity, and non-repudiation. &#8220;Ham-Fisted&#8221; is hyperbole, comparing Apple&#8217;s responsibility to provide a secure environment for its customers to monomaniacal political repression.<br />
Personally, I&#8217;ll settle for no less than what Apple is requiring, and I welcome it.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: GQB</title>
		<link>http://www.roughlydrafted.com/2008/03/18/iphone-20-sdk-how-signing-certificates-work/#comment-6350</link>
		<dc:creator>GQB</dc:creator>
		<pubDate>Wed, 19 Mar 2008 03:30:43 +0000</pubDate>
		<guid>http://www.roughlydrafted.com/2008/03/18/iphone-20-sdk-how-signing-certificates-work/#comment-6350</guid>
		<description>Digital code signing also provides one other security benefit... 'non-repudiation'.
This is the subtle flip side of authentication which prevents you from denying that you are responsible for the contents.
That's possibly the most important part of this model.</description>
		<content:encoded><![CDATA[<p>Digital code signing also provides one other security benefit&#8230; &#8216;non-repudiation&#8217;.<br />
This is the subtle flip side of authentication which prevents you from denying that you are responsible for the contents.<br />
That&#8217;s possibly the most important part of this model.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: John E</title>
		<link>http://www.roughlydrafted.com/2008/03/18/iphone-20-sdk-how-signing-certificates-work/#comment-6349</link>
		<dc:creator>John E</dc:creator>
		<pubDate>Wed, 19 Mar 2008 03:24:06 +0000</pubDate>
		<guid>http://www.roughlydrafted.com/2008/03/18/iphone-20-sdk-how-signing-certificates-work/#comment-6349</guid>
		<description>Apple's software downloads site is really lame. out of date stuff, no patches/updates, no reviews or links to reviews, no direct download links ... forgeddit. hasn't been improved since it was brand new so long ago i can't remember when that was (OS 9? OS 7?). i mean, it's old! the much newer Widget section is better, but still very limited. 

CNet's Version Tracker Pro service is vastly superior, though the UI is clunky. key trick is it identifies updates to your installed apps, plus the user comments are invaluable. it's not a free service tho. subscription. and lots of ads ...

Apple certainly could and should roll out an App Store for all Mac computer apps that did all that too, combining Software Update technology with iTunes Store retail front-end. not mandatory for software companies or users, just terrific UI and free service -  then we'd all use it. would beat the heck out of CNet and Amazon and all other software retailers.

hey - maybe the MacApp Store will be the second Golden Gate Bridge "landmark" unveiled at the WWDC in June. would make sense, building on the new iPhone App Store. my prediction!</description>
		<content:encoded><![CDATA[<p>Apple&#8217;s software downloads site is really lame. out of date stuff, no patches/updates, no reviews or links to reviews, no direct download links &#8230; forgeddit. hasn&#8217;t been improved since it was brand new so long ago i can&#8217;t remember when that was (OS 9? OS 7?). i mean, it&#8217;s old! the much newer Widget section is better, but still very limited. </p>
<p>CNet&#8217;s Version Tracker Pro service is vastly superior, though the UI is clunky. key trick is it identifies updates to your installed apps, plus the user comments are invaluable. it&#8217;s not a free service tho. subscription. and lots of ads &#8230;</p>
<p>Apple certainly could and should roll out an App Store for all Mac computer apps that did all that too, combining Software Update technology with iTunes Store retail front-end. not mandatory for software companies or users, just terrific UI and free service -  then we&#8217;d all use it. would beat the heck out of CNet and Amazon and all other software retailers.</p>
<p>hey - maybe the MacApp Store will be the second Golden Gate Bridge &#8220;landmark&#8221; unveiled at the WWDC in June. would make sense, building on the new iPhone App Store. my prediction!</p>
]]></content:encoded>
	</item>
</channel>
</rss>
