Notarization Required for Mac Apps Created With New Developer IDs Starting in macOS 10.14.5

Discussion in 'Mac Blog Discussion' started by MacRumors, Apr 8, 2019.

  1. MacRumors macrumors bot

    MacRumors

    Joined:
    Apr 12, 2001
    #1
    [​IMG]


    Apple today released updated developer documentation letting developers know that as of macOS 10.14.5, all new software distributed with a new Developer ID must be notarized in order to run.

    Apple plans to make notarization a default requirement for all software in the future.
    [​IMG]
    Notarization is a new concept introduced in macOS Mojave for apps distributed outside of the Mac App Store with the aim of protecting users from malicious Mac apps.

    Mac app developers are encouraged to submit their apps to Apple to be notarized, and an Apple-notarized app includes a more streamlined Gatekeeper dialog to reassure users that an app is not known malware.

    Apple provides trusted non Mac App Store developers with Developer IDs that are required to allow the Gatekeeper function on macOS to install non Mac App Store apps without extra warnings, but notarization takes it one step further.

    With the new requirement in macOS 10.14.5, developers who are new to distributing Mac apps with a Developer ID will need to go through the notarization process for their apps to work on the Mac.

    Apple late last year said that it would begin highlighting notarization status "more prominently" starting in spring 2019, and macOS 10.14.5 is apparently the update where that will begin happening.

    The notarization process is designed for non Mac App Store apps and is not required for those that are submitted to the Mac App Store. More information on notarization can be found on Apple's developer site.

    Article Link: Notarization Required for Mac Apps Created With New Developer IDs Starting in macOS 10.14.5
     
  2. cmaier macrumors G5

    Joined:
    Jul 25, 2007
    Location:
    California
    #2
    Ok, so long as unsigned apps still can be forced to work, which appears to be the case.
     
  3. Onexy macrumors regular

    Onexy

    Joined:
    Sep 14, 2012
    #3
    As long you as a user can still use all apps this is only gonna give you more security because a developer id is easy enough to get for malware developers.
     
  4. JetTester macrumors 6502

    Joined:
    Feb 12, 2014
    #4
    Sounds suspiciously like the last step before requiring Mac apps to be released through the App Store, just like iOS. Slippery slope!
     
  5. cmaier macrumors G5

    Joined:
    Jul 25, 2007
    Location:
    California
    #6
    Why? This only applies to signed apps.
     
  6. SoyCapitanSoyCapitan macrumors 601

    SoyCapitanSoyCapitan

    Joined:
    Jul 4, 2015
    Location:
    SELL $BTC
    #7

    Very good. Unsigned apps are a very big risk now. Pirate apps have key stroke loggers and spyware to steal your personal data from your computer. Ransomware targeting companies and governments can accidentally or purposefully be installed by employees. This isn’t the 90s anymore. Today’s dangers are life or death.
     
  7. KALLT macrumors 601

    Joined:
    Sep 23, 2008
    #8
    People also said that when Apple added Gatekeeper more than five years ago. Yet here we are.
     
  8. Internet Enzyme macrumors 6502a

    Internet Enzyme

    Joined:
    Feb 21, 2016
    #9
    Honestly i think GateKeeper is one of the most annoying piece of **** Mac things. The computer thinks im dumb. I downloaded this app because i want to use it. I do not care what you think macos. Why do you make me go to sys prefs and click through like three dialogs to open an app i willingly downloaded if i get a virus i get a virus so be it
     
  9. cmaier macrumors G5

    Joined:
    Jul 25, 2007
    Location:
    California
    #10
    Most users are dumb.
     
  10. martyjmclean, Apr 8, 2019
    Last edited by a moderator: Apr 9, 2019

    martyjmclean macrumors 6502

    martyjmclean

    Joined:
    Jan 24, 2018
    Location:
    Sydney, NSW, Australia
    #11
    If that was going to happen, it would’ve happened in Lion. That’s how long your “slippery slope” is.
    --- Post Merged, Apr 8, 2019 ---
    You don’t need System Preferences to open an app that Gatekeeper has blocked.
     
  11. aaronhead14 macrumors 6502a

    aaronhead14

    Joined:
    Mar 9, 2009
    #12
    While I appreciate privacy and security, this sounds like Apple trying to control what we can and can’t install on our devices. Doesn’t sound good....
     
  12. martyjmclean macrumors 6502

    martyjmclean

    Joined:
    Jan 24, 2018
    Location:
    Sydney, NSW, Australia
    #13
    They already do. The App Stores, certificates or notarisation. Obviously you can bypass this.
     
  13. JosephAW macrumors 68020

    JosephAW

    Joined:
    May 14, 2012
    #14
    As long as I can keep running older installed software like Adobe CS Suites and various versions of DTP software for backwards compatibility I'm fine with that.
     
  14. Internet Enzyme macrumors 6502a

    Internet Enzyme

    Joined:
    Feb 21, 2016
    #15
    They got rid of the “open anywhere” option in Sierra. Apps from unidentified developers can only be opened through System Preferences. The dialog that appears when you open unidentified software doesnt give you an option to open it from the dialog anymore
     
  15. leman macrumors G3

    Joined:
    Oct 14, 2008
    #16
    And how you you come to that conclusion? You can disable all these security features and Apple provides you with all the official documentation on how to do it. All these tools are simply a way to ensure that software you download doesn’t do anything weird. The notarization step makes perfect sense since there have been precedents of hackers gaining access to source code and injecting malicious code, which then got signed, infecting thousands of machines.

    Don’t forget, all of this does not apply to unsigned apps do you have all the freedom you want.
    --- Post Merged, Apr 8, 2019 ---
    Or you can right click, duh.
     
  16. lunarworks macrumors 65816

    Joined:
    Jun 17, 2003
    Location:
    Toronto, Canada
    #17
    Right Click. Open.
     
  17. NMBob macrumors 6502a

    Joined:
    Sep 18, 2007
    Location:
    New Mexico
    #18
    All your personal things belong to us.
     
  18. dogslobber macrumors 68040

    dogslobber

    Joined:
    Oct 19, 2014
    Location:
    Apple Campus, Cupertino CA
    #19
    Only techie experts will want to run non-notarized software. For the other 99.852% of macOS users, they'll want to be protected by Apple.
     
  19. martyjmclean macrumors 6502

    martyjmclean

    Joined:
    Jan 24, 2018
    Location:
    Sydney, NSW, Australia
    #20
    I know that, that’s why you open them via right-click...
     
  20. cmaier macrumors G5

    Joined:
    Jul 25, 2007
    Location:
    California
    #21
    Right click and select open
    --- Post Merged, Apr 8, 2019 ---
    What is this even supposed to mean?
     
  21. Eorlas macrumors 6502

    Joined:
    Feb 10, 2010
    #22
    "Mac app developers are encouraged to submit their apps to Apple to be notarized, and an Apple-notarized app includes a more streamlined Gatekeeper dialog to reassure users that an app is not known malware."

    No, god please no. Stop this. Dedicate more resources to software and hardware development, not policing applications. I'll figure out what's good to install/not. Thanks
     
  22. lunarworks macrumors 65816

    Joined:
    Jun 17, 2003
    Location:
    Toronto, Canada
    #23
    It's not about "policing". It's about basic checks for malware. Also, not everyone knows how to "figure out what's good to install/not" like you.
     
  23. Shirasaki macrumors 604

    Shirasaki

    Joined:
    May 16, 2015
    #24
    Yep. And when ARM chip for Mac is released, Apple will lock their system to exactly what they want and ignore all customer requests. I have to say this "users are dumb" mindset works most of the time. Just trash advanced users and leave no option for them. That sounds great. /s
     
  24. BasicGreatGuy Contributor

    BasicGreatGuy

    Joined:
    Sep 21, 2012
    Location:
    In the middle of several books.
    #25
    I don't think it is a matter of Apple thinking users are dumb. I think it is more so a matter of many people wanting, if not expecting Apple to keep them safe from the internet. Many people don't know much about their Mac(s). They just want to turn on the Mac and have it work. I think Apple is trying to protect their brand (hardware and software) by trying to make it more secure.
     

Share This Page