<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
KDE Connect GSoC students: here is some potentially helpful
information to you for thinking about posting to commercial app
stores. Make sure to subscribe to kde-devel if you are not already,
so that any more of this conversation can take place there<br>
<br>
Thanks,<br>
Simon<br>
<div class="moz-forward-container"><br>
<br>
-------- Forwarded Message --------
<table class="moz-email-headers-table" cellspacing="0"
cellpadding="0" border="0">
<tbody>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Subject:
</th>
<td>Re: Signing keys for commercial app stores</td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Date: </th>
<td>Mon, 10 Jun 2019 21:35:13 +1200</td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">From: </th>
<td>Ben Cooksley <a class="moz-txt-link-rfc2396E" href="mailto:bcooksley@kde.org"><bcooksley@kde.org></a></td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Reply-To:
</th>
<td><a class="moz-txt-link-abbreviated" href="mailto:kde-devel@kde.org">kde-devel@kde.org</a></td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">To: </th>
<td>kde-devel <a class="moz-txt-link-rfc2396E" href="mailto:kde-devel@kde.org"><kde-devel@kde.org></a></td>
</tr>
</tbody>
</table>
<br>
<br>
On Mon, Jun 10, 2019 at 2:03 PM Simon Redman
<a class="moz-txt-link-rfc2396E" href="mailto:simon@ergotech.com"><simon@ergotech.com></a> wrote:<br>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">
Hello,
</pre>
</blockquote>
<br>
Hi Simon,<br>
<br>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">
I am Simon, and I work on KDE Connect. This summer, KDE Connect has two
excellent GSoC students, one working on a MacOS port and one working on
a Windows port, with the end goal of bringing those ports to feature
pairity with our Linux version and doing an official release.
While we could just post our releases to some X.kde.org website and
distribute unsigned binaries, this would not reach as many users as
having them properly signed and released via the offical MacOS and
Windows app stores.
Does anyone have experience with:
A. Windows App Store Releases
B. MacOS App Store Release
</pre>
</blockquote>
<br>
While i'm not 100% familiar with things, for Windows releases at
least<br>
we already have substantial tooling and infrastructure in place
for<br>
this.<br>
<br>
The Binary Factory (binary-factory.kde.org) is capable of
generating<br>
both regular signed Windows installers, as well as Windows appx<br>
bundles for uploading to the Windows Store. The KDE e.V. also
operates<br>
an official presence (as such) on the Windows which Sysadmin
governs<br>
control of.<br>
<br>
To get started with these, i'd suggest your Windows student work
on<br>
the Craft packaging for KStars. Once that is in place we can look
into<br>
delegating access to the Windows Store to one of the KStars team
to<br>
allow you to submit KStars there (along with updates as needed)<br>
<br>
With regards to MacOS, due to how Apple manages this we have no<br>
official option for signing or making releases on the Apple Store
at<br>
this time.<br>
<br>
Given that an Apple Developer ID is required at minimum for
signing<br>
applications, and with an impending change to require applications
be<br>
notarised by Apple in future versions of MacOS (will be enforced
from<br>
Catalina onwards), it is unlikely we'll be making a change to this
(as<br>
there is no benefit to us having the Binary Factory sign apps when<br>
they need to be notaised for users to run them without having to
jump<br>
through hoops - we may as well ship them unsigned).<br>
<br>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">Thanks,
Simon
</pre>
</blockquote>
<br>
Regards,<br>
Ben<br>
</div>
</body>
</html>