news.volyx.in

Can't you just right click? (lapcatsoftware.com)

1169 points by bangonkeyboard · 2233 days ago · 746 comments on HN

Article summary

The article discusses the challenges of distributing unsigned Mac software due to Apple's Gatekeeper and notarization requirements. To run unsigned software, users must use a 'right-click' trick, which can be confusing and intimidating. The article argues that this process is not user-friendly and can deter users from running unsigned software. As a result, many Mac developers choose to pay for a Developer ID and notarization to avoid this issue.

Main themes

  • Gatekeeper and notarization
  • Mac software distribution
  • Developer ID and costs
  • Security and malware risks
  • User experience and warnings
  • Open-source and independent development

What commenters say

  • The Gatekeeper warnings are misleading and train users to click through warnings without understanding the risks.
  • Apple's notarization process does not guarantee that software is free from malware, and the warnings are overly broad.
  • The requirement for developers to pay for a Developer ID and notarization is a barrier to entry for open-source and independent developers.
  • The warnings and restrictions are intended to scare users into buying software from the App Store, rather than protecting them from actual security risks.
  • The security benefits of notarization are real, but the warnings and user experience could be improved to better inform users of the actual risks.
  • The cost of code signing and notarization is a significant burden for some developers, and alternative models, such as ring-based trust, could be explored.
  • The Gatekeeper system is effective in preventing malware, but it also prevents users from running legitimate unsigned software, which can be a problem for open-source and niche applications.