10.14 Hardened Runtime and App Notarization

The tool “SD Notary”, made for AppleScript developers, who are in the same boat as us Xojo decs, is FREE and works even for simple apps (no need to make a dmg first - I can just give it my app and then zip it afterwards). Sadly, the current version 1.1.1 doesn’t run as its “expired”. But that should be fixed soon again, and I’ve used it successfully to notarize my FAF2 betas in the past:

https://latenightsw.com/sd-notary-notarizing-made-easy/

[quote=410719:@Christoph De Vocht]OK, I agree. Open Source can have it’s advantages. True.

But free software isn’t. Period. :)[/quote]
Oh, so my free tools are useless or hurting the market? And the one mentioned above? Note that these tools are offered by professionals, and we know what we’re doing. Also, there are the one(s) you once made (well yes, you actually did hurt heavily my market when you released a free clone of my FAF and then didn’t want to take it down after I begged you not to do that)? shaking head in disbelief

Heu… FWW … I did take it down years ago. Especially for you. Remember? I even put a link on my website to recommend your app. :wink:

Yes, but only after you kept it available for still a long time regardless (years, IIRC). I’m not blaming you for it; it’s everyone’s fair right to make competitive apps, even free ones. Only you so forcefully said above that free apps destroy the market, when you did exactly that yourself. Maybe that’s how you came to the conclusion, after I brought this problem up with you? Then that’s fine. Still, I don’t agree that free apps are bad. In my case, for instance, they add visibility to my other (commercial) products. And since I use them myself, I also have an interest in keeping them functional.

Ah - Apple has relaxed the rules…: https://developer.apple.com/news/?id=09032019a

[quote]You can now notarize Mac software that:

  • Doesn’t have the Hardened Runtime capability enabled.
  • Has components not signed with your Developer ID.
  • Doesn’t include a secure timestamp with your code-signing signature.
  • Was built with an older SDK.
  • Includes the com.apple.security.get-task-allow entitlement with the value set to any variation of true.[/quote]

Only rescheduled the deadline to January 2020