After checking the MacOS notarization guidelines <...

# compose-desktop

[Nuru Nabiyev]

After checking the MacOS notarization guidelines doc, I came to conclusion that it is not possible to sign the app without paying apple 99$, is that true? I don’t want to distribute my compose desktop app through App store yet, but make it available to download only. Also is it same for Microsoft signature?

[swanti]

You don't have to sign the app to distribute it on macOS, it will just warn users

[Nuru Nabiyev]

But then they have to go through system settings and enable installation from there, rather than just pressing ‘ok’ when opening .dmg

[Michael Paus]

No, after installing the app you only have to Cntrl-Click (or use the right mouse button) on the app icon to get into the context menu to open it. Sometimes you have to do that twice. Once the app has opened for the first time you don’t have to repeat this procedure and can use it like any other installed app.

[Nuru Nabiyev]

So after installing it and opening it, this is what users get

[Nuru Nabiyev]

@Michael Paus @swanti users would have to open it through settings

[mikehearn]

For Microsoft, if you distribute via their app store then you only have to pay $19 once so it's very cheap. For Apple yes you pay to be a member of their developer programme, but you don't just get signing/notarization for that, you also get some bundled tech support tickets. So that's one way to look at it.

[Nuru Nabiyev]

Thanks! But is it possible to notarize/sign apps for macOS and Windows for free? Windows Defender also complains that the installer might be a virus and does not allow the installation to proceed

[mikehearn]

No it is not possible to do it for free. Can you explain why you need it?

[Nuru Nabiyev]

Well, I want for users to install my apps 😅

[Nuru Nabiyev]

I don’t need win/mac stores, I just want users to be able to download the app from the web like we all are doing

[Nuru Nabiyev]

And apparently it is not possible to without signing/notarizing?

[mikehearn]

Well, as explained above, it's possible but users have to override the security errors. Otherwise yes you must pay, the money covers the cost of ID verification and (for notarizations) scanning your app for malware.

[Michael Paus]

@Nuru Nabiyev have you tried what I said above? I am distributing my software like this without signing and notarization and others do so too on Macs. You only have to (sometimes twice) open the app via the context menu. You do not have to go into any settings.

[Nuru Nabiyev]

Yes it worked! I had to go to Applications folder -> Right click -> Context menu -> Open. First time it still asked to move to trash, but second time it allowed to open.

[Nuru Nabiyev]

But this is such a hassle for users… I have to add install instructions somewhere I guess. Is there no easier way to do it?

[Nuru Nabiyev]

I have downloaded multiple apps though browers before, and 99% of the apps were opening right away. Does it mean that they all pay Apple to notarize/sign their apps even though they are downloadable from website only and not appstore?

[gildor]

Yes, all of them pay, 99$ per year

[gildor]

I wouldn't say that it 99% of apps though, I quite often see non-signed apps, but maybe because it's often for dev and utility tools, not just consumer/paid app

[Nuru Nabiyev]

Bummer, I guess this is the way. Thanks a lot for your input lads!

[gildor]

Also it's true for iOS apps, where you have to pay even for free apps to publish and where there is no alternative way to install app (at least simple ones)

[Nuru Nabiyev]

Yeah, I know the appstore part, true. But now EU allowed to sideload the apps 😉 Let’s see once I develop for mobile as well, for now my focus is desktop only.
For linux the distribution is easy with .deb, and now on win/mac I’ll have to sign I guess