Open source UWP app, can I make the app identity public -
i have open-source uwp app want use appveyor automatically create appxupload package me.
i stumpled upon this instructions on how configure project create appxupload package without requiring app_storekey.pfx certificate file.
now i'm wondering if can make these values, app identity, public, or if can harm them?
i mean these values right here.
now i'm wondering if can make these values, app identity, public, or if can harm them?
yes, can. means distribute project's source code - uniquely identifies developer (and publishing chain) must kept secret because that's how consumers of application can trust build you, original developer, , not malicious third-party modified program evil (e.g. upload users' contacts list spamming service) - if make signing files publicly available can imitate you.
Comments
Post a Comment