Code signing policy

Built in public. Signed only from there.

Free code signing provided by SignPath.io, certificate by SignPath Foundation.

Signing starts with the first Windows release after SignPath approves Cinderpaw. Installers released before that are not signed.

What is signed

The Windows installer for Cinderpaw (Cinderpaw_<version>_x64-setup.exe, and the .msi when there is one).

Every signed file is built by GitHub Actions, in public, from the source code in github.com/bloom500/cinderpaw, when a new version is tagged (release.yml). Nothing built on a personal computer is ever signed. I approve each signing request by hand before the installer is published.

How to check a download

Right-click the installer, choose Properties, then open the Digital Signatures tab. The signer must be SignPath Foundation. If a signed release shows no such tab, or the tab names anyone else, do not run the file and tell me.

Team roles

• Committers and reviewers: Darius (bloom500). Changes proposed by anyone else, as pull requests, are reviewed by me before they are merged.
• Approvers: Darius (bloom500).

Privacy

Besides what you set up yourself, Cinderpaw sends only this: a one-time install count (its version and your operating system) that you can untick on the last setup screen, a daily usage summary only if you turn it on, bug reports only when you send one, and an update check you can turn off. The full details are in the privacy policy and in my promises.