@mattifestation In more restrictive environments, code signing allows for things like Windows Group Policy to implement publisher, as opposed to application, whitelisting (or blacklisting). See <a href="https://docs.microsoft.com/en-us/windows-hardware/drivers/install/trusted-publishers-certificate-store">https://docs.microsoft.com/en-us/windows-hardware/drivers/install/trusted-publishers-certificate-store</a> for an example of a long-lived Group Policy control.

Keith

@kwm

@mattifestation In more restrictive environments, code signing allows for things like Windows Group Policy to implement publisher, as opposed to application, whitelisting (or blacklisting).

See https://docs.microsoft.com/en-us/windows-hardware/drivers/install/trusted-publishers-certificate-store for an example of a long-lived Group Policy control.

5/2/2019, 11:48:48 PM

Favs: 0

Retweets: 0

link