Home → Extension Development →

Can the invalid signature warning be rephrased?

• Edit

Kevin Stembridge

14 Jul, 2015 10:05 PM

Hi,

I get a few people concerned about the invalid signature warning they get when installing the extension. It's a bit too technical. Could you consider rephrasing it to be more plain English. e.g. Something like "This extension has not been inspected by the Moneydance team. Do you still want to continue?".

Cheers,
Kevin

1. Support Staff 1 Posted by Sean Reilly on 15 Jul, 2015 11:50 AM

   

   Hi Kevin,

   I think it'd be better for everyone if we simply reviewed and signed the extension. Would that be ok with you?

   Sean Reilly
   Developer, The Infinite Kind
   http://infinitekind.com

   • Edit

2. 2 Posted by Kevin Stembridg... on 15 Jul, 2015 10:04 PM

   

   Hi Sean,

   I think that's a pretty good idea but there's a couple of reasons why I've been holding back on doing that.

   I want to be able to respond very quickly when customers find bugs or request new features. I'd like to be able to turn around bugs in a day or two and I'm not sure you would be able to be that responsive. Understandably so.

   The other reason is that I want to be able to capture metrics. e.g. How many of the people who visit the website actually download. Are existing customers continuing to download updates etc.

   Maybe another option would be for Moneydance to include the public certificates of third-party extension developers and provide a less severe warning for those.

   At some point in the future I'd like to revisit this but for now I'd like to continue doing my own hosting.

   Cheers,
   Kevin

   • Edit

3. Support Staff 3 Posted by Sean Reilly on 16 Jul, 2015 03:25 PM

   

   Hi Kevin,

   Hosting it yourself is fine with us. We can just sign and return the mxt file to you without putting it into the built-in list of available extensions. This way you can choose to host the signed version if we're up to date or to put out an unsigned version if you want to distribute it with a very quick turnaround to customers.

   We can also provide a much faster turnaround than in the past, for example if you wanted to give us access to a git repository and just tell me when there are changes to sign. You can ping me via skype (sreilly) or iMessage ([email blocked]) for the fastest response.

   Thanks,
   Sean

   • signature.asc 802 Bytes
   • Edit

4. 4 Posted by Kevin Stembridg... on 16 Jul, 2015 08:27 PM

   

   Hi Sean,

   That sounds great. Let me finish off the feature I'm working on now and I'll get back in touch when I'm ready to go.

   Thanks for the support. Much appreciated.

   Kevin

   • Edit

5. System closed this discussion on 19 Mar, 2016 05:00 AM.