Are the 4.0 code signing changes valid and safe?

[sporkman]

Hi,

Could anyone from the project confirm this change in the code signer's sig is correct?

If so, could a change like that be noted in future release notes?

Thanks,

Charles

[cstigler]

Huh, was not expecting this change to trigger any warnings, but you are the second person to notice (see #721) so apparently I was wrong. Yep, this is a valid and expected change, no cause for concern.

My old developer account got nerfed by a bureaucratic error at Apple, hence the change. It's a big hassle so no plans to switch ever again :)

[sporkman]

Yeah, I run Little Snitch (from obdev.at) and while it's basically a little per-app firewall, it does record code signatures for every app for which it allows outbound (and I guess inbound) access. If the sig changes, it wants a confirmation.