starred/qBittorrent

Fork 0

mirror of https://github.com/qbittorrent/qBittorrent.git synced 2026-03-02 22:57:32 -05:00

Sign the EXE files for trust #13982

New issue

Open

opened 2026-02-22 00:33:05 -05:00 by deekerman · 8 comments

deekerman commented

2026-02-22 00:33:05 -05:00

Owner

Originally created by @clicktodev on GitHub (Nov 17, 2022).

Suggestion

Installer EXE files should be properly signed for better trust of the packages on the website.

Use case

Guarantee that the distributed binaries are generated by a trusted party.

Extra info/examples/attachments

The proper instructions are available here.

Originally created by @clicktodev on GitHub (Nov 17, 2022). ### Suggestion Installer EXE files should be properly signed for better trust of the packages on the website. ### Use case Guarantee that the distributed binaries are generated by a trusted party. ### Extra info/examples/attachments The proper instructions are available [here](https://learn.microsoft.com/en-us/windows/win32/appxpkg/how-to-sign-a-package-using-signtool).

deekerman added the

Duplicate

Project management

labels

2026-02-22 00:33:05 -05:00

deekerman commented

2026-02-22 00:33:10 -05:00

Author

Owner

@stalkerok commented on GitHub (Nov 17, 2022):

https://github.com/qbittorrent/qBittorrent/issues/18022#issuecomment-1315056483

qBittorrent's installer/EXE is not signed. I think that's a requirement. It is extremely expensive and tedious to do so. (last time I checked)

@stalkerok commented on GitHub (Nov 17, 2022): https://github.com/qbittorrent/qBittorrent/issues/18022#issuecomment-1315056483 > qBittorrent's installer/EXE is not signed. I think that's a requirement. It is extremely expensive and tedious to do so. (last time I checked)

deekerman commented

2026-02-22 00:33:14 -05:00

Author

Owner

@Balls0fSteel commented on GitHub (Nov 17, 2022):

Ugh this has been mentioned so many times. Let me just find a few existing tickets about it. I even mentioned why it's not signed. It's not trivial, it's expensive to do so (you need a software cert) and it's a tedious process.

@Balls0fSteel commented on GitHub (Nov 17, 2022): Ugh this has been mentioned so many times. Let me just find a few existing tickets about it. I even mentioned why it's not signed. It's not trivial, it's expensive to do so (you need a software cert) and it's a tedious process.

deekerman commented

2026-02-22 00:33:14 -05:00

Author

Owner

@Balls0fSteel commented on GitHub (Nov 17, 2022):

https://github.com/qbittorrent/qBittorrent/issues/1376

I mentioned a few prices and links in there back then.

@Balls0fSteel commented on GitHub (Nov 17, 2022): https://github.com/qbittorrent/qBittorrent/issues/1376 I mentioned a few prices and links in there back then.

deekerman commented

2026-02-22 00:33:14 -05:00

Author

Owner

@c0bw3b commented on GitHub (Feb 19, 2023):

Code signing is indeed becoming more and more important for trust in binary distribution, especially for software installed system-wide with elevated privileges.

Cost was an issue for FLOSS software but things have changed since 2014. There is now initiatives to provide code signing to open source project for free, such as SignPath:

Vim or Transmission installers are signed this way.

@c0bw3b commented on GitHub (Feb 19, 2023): Code signing is indeed becoming more and more important for trust in binary distribution, especially for software installed system-wide with elevated privileges. Cost was an issue for FLOSS software but things have changed since 2014. There is now initiatives to provide code signing to open source project for free, such as SignPath: * https://signpath.org/ * https://about.signpath.io/product/open-source Vim or Transmission installers are signed this way.

deekerman commented

2026-02-22 00:33:14 -05:00

Author

Owner

@soredake commented on GitHub (May 10, 2023):

MSIX packages can be signed for free when published to microsoft store for example https://www.advancedinstaller.com/msix-digital-signing.html

@soredake commented on GitHub (May 10, 2023): MSIX packages can be signed for free when published to microsoft store for example https://www.advancedinstaller.com/msix-digital-signing.html

deekerman commented

2026-02-22 00:33:14 -05:00

Author

Owner

@luzpaz commented on GitHub (May 14, 2023):

Close this as a dupe

@luzpaz commented on GitHub (May 14, 2023): Close this as a dupe

deekerman commented

2026-02-22 00:33:14 -05:00

Author

Owner

@long76 commented on GitHub (Feb 21, 2025):