Choose + procure a Windows code-signing certificate (one for the whole fleet)

[martymcenroe]

A code-signing cert (or signing account) so our Windows binaries install without SmartScreen "unknown publisher" warnings. One cert/account signs every app across all projects — not per-app.

Options, cheapest first (verified 2026)

• SignPath Foundation — FREE for qualifying open-source projects (OV-level, managed signing pipeline). Silphe is open source, so this may cost $0. Has qualification criteria — verify eligibility.
• Azure Artifact Signing (formerly Trusted Signing) — ~$10/month, 5,000 signatures included. Microsoft's recommended path for apps distributed outside the Store; cloud-based, no hardware token to manage, signs everything. Historically needed an org 3+ years old — verify current individual eligibility.
• Certum Open Source Code Signing — ~$70–130/yr, dedicated to OSS, "Open Source Developer" on the cert; uses their card/cloud.
• Traditional CAs (Sectigo/SSL.com/DigiCert): OV ~$216/yr, EV ~$280–560/yr, require a FIPS hardware token. More cost + hassle; not recommended here.

Recommendation

Try SignPath (free, we qualify as OSS) → fall back to Azure Artifact Signing (~$10/mo). Avoid the token-based CAs.

Notes

• 2026 change: code-signing cert lifespans capped at ~1 year.
• Cloudflare does not sell code-signing certs (those are CA/Authenticode products) — but Cloudflare R2/Pages is great + cheap for hosting the signed binary.

[martymcenroe]

Correction on SignPath eligibility

SignPath Foundation requires an established project — the application asks for "Reputation" (widely used/trusted, download stats, media/community coverage), that "a Google search clearly identifies" the project, and a download page that mentions SignPath. A package published today can't meet that. So SignPath is a revisit-in-a-few-months option, once silphe has stars / downloads / traction.

Revised plan:

• Now: no cert needed — it's only for the desktop .exe (Build the game as a standalone Windows .exe (PyInstaller) #16/Publish the game to winget (Windows Package Manager) #17), which isn't built or urgent. The PyPI launch needs zero signing.
• When shipping the .exe, if silphe still isn't established: Azure Artifact Signing (~$10/mo) — no reputation bar.
• Later, once silphe has traction: SignPath (free).