Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

.NET Code Signing Pricing

I am looking into options for code signing our company's application, and it seems there are several different providers such as:

  • VeriSign
  • Thawte
  • Comodo
  • GoDaddy

Are there pros and cons for each provider, or are they all basically the same and I should use the one with the cheapest price? My end goal is to have my application known as a trusted provider so that we can do stand-alone user updates without UAC prompts.

NOTE: I know there is already a question about Code Signing Options on StackOverflow, but I believe this question is a little different.

EDIT: Expanded list of options, as mentioned below in the comments.

like image 713
Blake Blackwell Avatar asked Jan 21 '10 16:01

Blake Blackwell


People also ask

How much does code signing certificate cost?

Get started with code signing - order a certificate today. Purchasing a code signing certificate is a simple process. Most of the time, you won't even need a CSR to complete the purchase order form online. Get a code signing certificate for just $474/year.

What is the difference between code signing and EV code signing?

Regular Code Signing – both gives secure environment to developers for their software codes. EV code signing keeps the private key secret using hardware token whereas in Regular code signing the private key is not provided in a separate external drive.

How many times can you use a code signing certificate?

How long can I use a Code Signing certificate for? Code Signing certificates are valid for 1 to 3 years depending on which life cycle you choose when you purchase the certificate. See: pricing information. You should also timestamp your signed code to avoid your code expiring when your certificate expires.


2 Answers

At the end of the day it doesn't really matter.

So, pick one that meets your price / reputation needs. Personally, I'd go with the cheapest option as the three you mentioned have been around a very long time.


UPDATE:

No additional software is required. Adoption rate isn't really important (and you'll never find that information anyway). Instead, the reputation of those companies is very good, and that's the part that matters.

When evaluating key generation companies, you want to know how long have they been in business, and, if they have ever lost a key or been hacked.

like image 188
NotMe Avatar answered Oct 02 '22 09:10

NotMe


I don't know how everyone feels about their reputation, but GoDaddy also offers code signing certificates, and they appear to be significantly less expensive than the other options.

like image 22
Adam Robinson Avatar answered Oct 02 '22 09:10

Adam Robinson