Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

MacRumors

macrumors bot
Original poster
Apr 12, 2001
63,477
30,699



Apple today sent out an email encouraging Mac developers to sign up for the company's Developer ID program so that their apps can be properly signed ahead of the launch of OS X Mountain Lion later this year. Mountain Lion's Gatekeeper feature gives users the ability to set limits on app installation, with the new "Developer ID" program providing a middle ground of security by which developers can certify that they are the developer behind a given application package.

developer_id_gatekeeper_email.jpg



Should the developer be found to behave maliciously, Apple will be able to revoke the Developer ID associated with that developer, preventing applications signed with the ID from running and causing further harm to users.
The Mac App Store is the safest place for users to get software for their Mac, but we also want to protect users when they get applications from other places. Gatekeeper is a new feature in OS X Mountain Lion that helps protect users from downloading and installing malicious software. Signing your applications, plug-ins, and installer packages with a Developer ID certificate lets Gatekeeper verify that they are not known malware and have not been tampered with.
This marks the second such mass emailing to encourage adoption of Developer ID among the Mac developer community, as Apple sent out a similar mailing back in late February following its announcement of OS X Mountain Lion. The next major operating system is due for public launch in "late summer" and will undoubtedly be a featured topic at Apple's sold-out Worldwide Developers Conference in early June.

Article Link: Apple Again Encouraging Mac Developers to Sign Up for Developer ID Ahead of OS X Mountain Lion
 

ArtOfWarfare

macrumors G3
Nov 26, 2007
9,557
6,058
I don't recall Apple previously saying developers can sign up for gatekeeper already.

Oh... Do I not have to do anything special? Is this the same code signing I have to do to get my apps on the Mac app store already?
 

Small White Car

macrumors G4
Aug 29, 2006
10,966
1,463
Washington DC
Here's one area where I hope iOS learns from the Mac.

If this proves successful with Mountain Lion I sure would like to see the iPad take this approach over the app-approval process it has now.

I think it will happen eventually. Hand-checking every submission is only going to get harder and harder for Apple as time goes on.
 

KnightWRX

macrumors Pentium
Jan 28, 2009
15,046
4
Quebec, Canada
Here's one area where I hope iOS learns from the Mac.

If this proves successful with Mountain Lion I sure would like to see the iPad take this approach over the app-approval process it has now.

I think it will happen eventually. Hand-checking every submission is only going to get harder and harder for Apple as time goes on.

This doesn't change anything to the hand-checking of every submission at all. This isn't for App Store applications.
 

pdjudd

macrumors 601
Jun 19, 2007
4,037
65
Plymouth, MN
This doesn't change anything to the hand-checking of every submission at all. This isn't for App Store applications.
I think he's referring to the iOS App Store. I think what he wants is the ability to install native apps not available on the iOS App store on an iOS device by having iOS implement some function of Gatekeeper were apps can still be signed but not have to go through an approval process..
 

lostngone

macrumors 65816
Aug 11, 2003
1,431
3,804
Anchorage
Walled garden?

This is the walled castle with a moat and a drawbridge, approach.

Step away from the computer. The tribunal has deemed your coding to sub-par and sloppy. We are going to have to revoke your keys.
 

pmz

macrumors 68000
Nov 18, 2009
1,949
0
NJ
I think he's referring to the iOS App Store. I think what he wants is the ability to install native apps not available on the iOS App store on an iOS device by having iOS implement some function of Gatekeeper were apps can still be signed but not have to go through an approval process..

I don't really see the benefit.

I'd rather my apps be approved by Apple. They've done a great job, all things considered. I really have no need of any apps that are not approved by Apple and use private API's.

That's what the jailbreak community is for, if you really need it. I no longer do.
 

segfaultdotorg

macrumors 65816
Jan 25, 2007
1,117
1,318
Coming soon:
  • Apple Security Essentials
  • Warnings for drivers which haven't passed OS X Logo testing
  • OS X Malicious Software Removal Tool
  • OS X Security Center
  • OS X Defender
 

mactmaster

macrumors 6502
Jun 16, 2010
390
1
I don't recall Apple previously saying developers can sign up for gatekeeper already.

Oh... Do I not have to do anything special? Is this the same code signing I have to do to get my apps on the Mac app store already?

The developer ID use is for non Mac App Store apps. If you are in the App Store already you are ok.
 

Krevnik

macrumors 601
Sep 8, 2003
4,100
1,309
I don't really see the benefit.

I'd rather my apps be approved by Apple. They've done a great job, all things considered. I really have no need of any apps that are not approved by Apple and use private API's.

That's what the jailbreak community is for, if you really need it. I no longer do.

The jailbreak community bypasses the security of the platform, and uses security holes to do it. That second part is the important bit. If you have a 100% secure platform, you can't jailbreak. If you can jailbreak through say, Safari, that represents a serious security risk in the platform that needs to be fixed.

Having a gatekeeper does tend to stifle some types of random innovation through "We don't want a second browser", and "We know what is best for the core UI" principles. I understand Apple's stance, but some of what they buy and learn from are people who do it anyways.

So, if they were to allow apps signed with a Gatekeeper certificate onto iOS in the future, that would start to get benefits from signing in the security model, while at the same time, getting the key benefits that the jailbreak community provides as well. One of the things that Microsoft has screwed up with their signing model on Windows is making everyone pay Verisign for the certs. That meant that signing is not universal, which erodes and undermines the security benefits very quickly.
 

pdjudd

macrumors 601
Jun 19, 2007
4,037
65
Plymouth, MN
I don't really see the benefit.

I'd rather my apps be approved by Apple. They've done a great job, all things considered. I really have no need of any apps that are not approved by Apple and use private API's.

That's what the jailbreak community is for, if you really need it. I no longer do.
Sorry to burst your bubble but there are several apps that just are not going to ever get distributed in the MAS - in many cases it's just fundamentally incompatible with the way their business operates.
 

Moonjumper

macrumors 68030
Jun 20, 2009
2,740
2,908
Lincoln, UK
I don't really see the benefit.

I'd rather my apps be approved by Apple. They've done a great job, all things considered. I really have no need of any apps that are not approved by Apple and use private API's.

That's what the jailbreak community is for, if you really need it. I no longer do.

There are a few types of app that are not suitable for the Mac App Store, but users will want.

There is software that is too expensive for the store. Adobe Creative Suite, Maya and 3DS Max for example.

Also, apps that may be too adult in content. This will include some games.

Plus apps coming through another distribution sources such as Steam.

And then there is open source software that has licences that clash with the Mac App Store EULA.

All of these will include many trustworthy sources. It is good that Apple are allowing developers an alternative.
 

*LTD*

macrumors G4
Feb 5, 2009
10,703
1
Canada
This isn't antivirus software, people.

And Gatekeeper was unveiled on February 16th. It's been in the works for a while now.
 

milo

macrumors 604
Sep 23, 2003
6,891
522
So has apple issued any of these codes to devs or apps?

Sure doesn't seem like it considering that on 10.8 even apps downloaded from apple give a warning that it's from a developer who hasn't been approved. So what's the holdup? If they want to test this new security system, better make it possible for devs to have signed apps sooner rather than later so things are good to go well before the release of ML.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.