SmartScreen Unknown Publisher Windows 10 Prompt Duriing ReadyCloud App Setup
Hi everyone,
Upon clicking the ReadyCloudSetup.exe file for the ReadyCloud app for Windows 10, I get a SmartScreen prompt warning. It says "unknown publisher" but the prompt is not the usual UAC prompt that we get in the previous versions of Windows. This is the first time I am trying to install the app. I usually contact the author of the program to remind of this and wait for a few days before installing to make sure that I get the correct version.
Do we have a properly certified or digitally signed version of the ReadyCloud app installer? I just want to make sure that what we're getting is the actual proper version.
It seems that the SmartScreen filter does not trust the one that is directly downloaded from the ReadyCloud portal. I want to get an assurance that the download is safe and the source is not hijacked.
We are aware of this issue, this is due to SHA-1 support in our existing digital signature that was obsoleted by Windows 10. The file itself is not corrupted, you can launch it after downloading it by ignoring the message. We are working on getting a new signature with SHA-2 support.
The concern is that SHA-1 certs will soon be forgable if you are prepared to spend enough on cloud computing resources. The plan is to deprecate SHA-1 before that becomes practical.
We're aware of this issue with most browsers. I can't reproduce it in Chrome. The binary is actually okay, but Firefox/IE/Edge are prompting this message. We plan to fix it in an upcoming build of ReadyCLOUD App.
