Code Signing
-
Articles on code signing: why to sign code, EV and OV certificates, key sizes, hardware storage, timestamping and what to do when a certificate expires.
-
1Why You Should Sign Your Code and Verify It Before Publishing
Learn why to sign your code, what you need, where a code signing certificate is needed, how to sign and how to verify before you publish.
-
2Which Is the Best EV Code Signing Certificate in 2026?
Compare EV code signing certificates for 2026: benefits, selection criteria and the options available through GoGetSSL, including cloud signing.
-
3What Is FIPS 140? FIPS 140-2 vs. FIPS 140-3 Explained
Understand FIPS 140: its four security levels, how FIPS 140-3 replaced FIPS 140-2, why it matters for code signing and how to check a module.
-
4Timestamping: Why Digital Signatures Need Timestamps
Learn how timestamping keeps a code signature valid after the certificate expires, what happens without it and how to add a timestamp.
-
5TPM vs. HSM: Key Differences, Features, and Use Cases
Compare TPM and HSM: what each does, key features, when to use them and how they differ in purpose, scope, key management and scalability.
-
6How Microsoft OS Reputation Management Works to Protect Against Malicious Software
Learn how Microsoft SmartScreen, code signing, cloud protection and Smart App Control use reputation to protect Windows users from malware.
-
7EV Code Signing vs. OV Code Signing: Key Differences
Compare EV and OV code signing certificates: validation, key storage, SmartScreen reputation and driver signing, and choose the right one.
-
8Your Code Signing Certificate Has Expired: What Happens and What to Do
See what happens when a code signing certificate expires, why timestamped releases stay valid, what to do next and how to avoid a gap.
-
9Code Signing Without a Hardware Token: Is It Possible?
Find out if you can sign code without a hardware token, and compare hardware tokens, your own HSM and cloud signing for key protection.
-
10Code Signing Security: 20 Best Practices for Developers
Follow 20 best practices to secure code signing: protect private keys, control access, secure the pipeline, manage the lifecycle and audit.
-
11Code Signing Certificates: Stronger Security with 3072- or 4096-bit RSA Keys
Learn why code signing certificates need RSA keys of at least 3072 bits, how key length relates to security, and how to check the key size.
-