IE9 SmartScreen 警告,尽管遵循所有建议

发布于 11-15 02:13 字数 1266 浏览 7 评论 0原文

我们提供 Windows 程序,可从我们的网站以 InstallShield EXE 形式下载。

当运行 IE9 的用户尝试下载并运行我们的软件时,他们会在屏幕底部看到以下消息:

PROGRAMNAME.exe is not commonly downloaded and could harm your computer.
[DELETE] [ACTIONS] [VIEW DOWNLOADS]

我已阅读 http://blogs.msdn.com/b/ie/archive/2011/03/22/smartscreen-174-application-reputation-building-reputation.aspx

它建议:

  • 数字签名你的程序 验证码签名。
  • 确保下载不会被检测为 恶意软件。
  • 申请 Windows 徽标。

我们已经完成了所有三件事。我们的EXE是用authenticode签名进行数字签名的(警告消息上方的条是橙色的,而不是红色的,表明IE9识别并验证了签名)。我们尝试过的任何防病毒程序都没有将我们的下载检测为恶意软件。我们已经申请并收到了 Windows 徽标。

到目前为止,我们的大多数客户还没有使用IE 9。但这对于使用IE 9的客户来说是非常麻烦的。对此我们还能做些什么吗?或者我们是否必须等到足够多的客户下载了该软件之后此消息才会消失?

(这是否意味着当我们发布新版本时,所有 IE 9 用户都会再次收到此消息,直到足够多的人下载为止?)

更新 2011-06-14:

谢谢,@EricLaw-MSFT。网址为 http://dakim.dakiminc.netdna-cdn.com/DakimBrainFitness.exe。 在 http://www.dakim.com 上的“下载免费试用版”按钮上找到。)

(可以 我们只提供可下载试用版一段时间。我们的主要分发方法是安装 DVD。

We offer a Windows program downloadable as an InstallShield EXE from our website.

When someone running IE9 attempts to download and run our software, they see the following message at the bottom of their screen:

PROGRAMNAME.exe is not commonly downloaded and could harm your computer.
[DELETE] [ACTIONS] [VIEW DOWNLOADS]

I've read http://blogs.msdn.com/b/ie/archive/2011/03/22/smartscreen-174-application-reputation-building-reputation.aspx

It suggests:

  • Digitally sign your programs with an
    Authenticode signature.
  • Ensure downloads are not detected as
    malware.
  • Apply for a Windows Logo.

We've done all three things. Our EXE is digitally signed with an authenticode signature (and the bar above the warning message is orange, not red, indicating that IE9 recognized and verified the signature). Our download is not detected as malware by any antivirus program we've tried. And we have applied for and received a Windows Logo.

As yet, most of our customers are not using IE 9. But this is very troublesome to those who do. Is there anything else we can do about this, or do we just have to wait until a critical mass of customers have downloaded this software before this message will go away?

(Does that mean when we release a new version, all IE 9 users will get this message again until enough of them have downloaded it?)

UPDATE 2011-06-14:

Thanks, @EricLaw-MSFT. URL is http://dakim.dakiminc.netdna-cdn.com/DakimBrainFitness.exe . (It's found on the "Download Free Trial" button on http://www.dakim.com .)

We've only been offering downloadable trials for a short while. Our primary distribution method is installation DVDs.

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(1

星星的轨迹2024-11-22 02:13:44

根据帖子:

信誉被生成并分配给数字证书以及特定文件。数字的
证书允许聚合数据并将其分配给单个证书而不是多个证书
个人计划。尽管不是必需的,但由 EV 代码签名证书签名的程序可以立即通过 SmartScreen 信誉服务建立信誉,即使该文件或发布者先前不存在信誉也是如此。 EV代码签名证书也有一个唯一的标识符
这使得在证书续订过程中更容易保持声誉。仅验证码
由作为 Windows 根证书计划成员的 CA 颁发的证书可以建立
声誉。

目前,Symantec 和 DigiCert 正在提供 EV 代码签名证书。

为了改进我的答案,我添加了一个链接到 类似的问题我问过并最终回答了自己。

Extended Validation Code Signing Certificates don't suffer from the need to build reputation slowly according to this post:

Reputation is generated and assigned to digital certificates as well as specific files. Digital
certificates allow data to be aggregated and assigned to a single certificate rather than many
individual programs. Although not required, programs signed by an EV code signing certificate can immediately establish reputation with SmartScreen reputation services even if no prior reputation exists for that file or publisher. EV code signing certificates also have a unique identifier
which makes it easier to maintain reputation across certificate renewals. Only Authenticode
Certificates issued by a CA that is a member of the Windows Root Certificate Program can establish
reputation.

At this time, Symantec and DigiCert are offering EV code signing certificates.

In an effort to improve my answer, I've added a link to a similar question I asked and eventually answered myself.

~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文