Using Driver Signing Certificate for Code Signing

411 Views Asked by At

When distributing Software (by Microsoft ClickOnce), are there downsides on using an existing Driver Signing Certificate (from GoDaddy) for Code Signing?

1

There are 1 best solutions below

0
Dennis Alexander On BEST ANSWER

There shouldn't be any difference using a kernel code certficate instead of a normal Code-Signing-Certificate. They are both based on the Microsoft Authenticode system but they are - for what I know - on a different level of trust:

  • Code-Signing-Certificates: Class 2
  • Microsoft-Kernel Code: Class 3

(based on https://www.startssl.com/?app=40 and other CAs)

So basically it's like using a S/MIME Class 2 Certificate instead of Class 1. It offers more 'Security' (more owner validation) but does it job like the Class 1 one.