{"slug": "signpath", "name": "SignPath", "category": "other", "category_name": "Other software", "description": "", "recommenders": 3, "commenters": 3, "warners": 0, "score": 2.668, "rising": -0.98, "first": "2025-12-03", "latest": "2026-05-09", "why": "We ended up getting our certificate sources from https://signpath.org and have been grateful to them ever since.", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 4, "neutral": 0, "compare": 0, "warn": 0}, "spark": [0, 1, 0, 0, 0, 1, 2, 0, 0, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "We ended up getting our certificate sources from https://signpath.org and have been grateful to them ever since.", "kind": "", "icon": true, "domain": "signpath.org", "github_repo": null, "official_url": "https://signpath.org", "pricing": "", "aliases": ["SignPath"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 769291184, "item_id": 48080699, "url": "https://news.ycombinator.com/item?id=48080699", "by": "mixologic", "date": "2026-05-09", "stance": "recommend", "quote": "is about as close as you can get", "excerpt": "https://signpath.org/ is about as close as you can get.", "context": "", "use_case": "Open source code signing", "switched_from": "", "story": "Apple is increasing my cortisol levels"}, {"id": 769273168, "item_id": 48079573, "url": "https://news.ycombinator.com/item?id=48079573", "by": "justinclift", "date": "2026-05-09", "stance": "recommend", "quote": "you can use SignPath for free", "excerpt": "For Open Source Software, you can use SignPath for free: https://signpath.org That's what we did for DB Browser for SQLite (sqlitebrowser.org), and it works well: https://sqlitebrowser.org/blog/signing-windows-executables-our-journey-with-signpath/ SignPath also does stuff for commercial places too (https://signpath.io), but I have no idea of the pricing.", "context": "", "use_case": "", "switched_from": "", "story": "Apple is increasing my cortisol levels"}, {"id": 763097041, "item_id": 47693565, "url": "https://news.ycombinator.com/item?id=47693565", "by": "VadimPR", "date": "2026-04-08", "stance": "recommend", "quote": "We ended up getting our certificate sources from https://signpath.org and have been grateful to them ever since.", "excerpt": "A year ago I used Azure Trusted Signing to codesign FOSS software that I distribute for Windows. It was the cheapest way to give away free software on that platform. A couple of months ago I needed to renew the certificate because it expired, and I ran into the same issue as the author here - verification failed, and they refused to accept any documentation I would give them. Very frustrating experience, especially s", "context": "distributes FOSS software for Windows", "use_case": "code signing certificates", "switched_from": "Azure Trusted Signing", "story": "Microsoft Abruptly Terminates VeraCrypt Account, Halting Windows Updates"}, {"id": 738142544, "item_id": 46133909, "url": "https://news.ycombinator.com/item?id=46133909", "by": "justinclift", "date": "2025-12-03", "stance": "recommend", "quote": "We've been using them for over a year now", "excerpt": "Why do you say that? Things like SignPath exist: https://signpath.io/knowledge-base/introduction We've been using them for over a year now for signing the DB Browser for SQLite executables: https://sqlitebrowser.org/blog/signing-windows-executables-our-journey-with-signpath/", "context": "", "use_case": "Windows executable signing", "switched_from": "", "story": "Microsoft won't let me pay a $24 bill, blocking thousands in Azure spending"}]}], "caveats": [], "who": [{"by": "VadimPR", "context": "distributes FOSS software for Windows", "url": "https://news.ycombinator.com/item?id=47693565", "date": "2026-04-08"}], "tags": [], "use_cases": ["open source code signing", "code signing certificates", "windows executable signing"], "compared": [{"slug": "azure-artifact-signing", "name": "Azure Artifact Signing", "co": 1, "switched_from": 1, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=48075366", "title": "Apple is increasing my cortisol levels", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=47690977", "title": "Microsoft Abruptly Terminates VeraCrypt Account, Halting Windows Updates", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46124930", "title": "Microsoft won't let me pay a $24 bill, blocking thousands in Azure spending", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {"recommend": 1}, "2026-01": {}, "2026-02": {}, "2026-03": {}, "2026-04": {"recommend": 1}, "2026-05": {"recommend": 2}, "2026-06": {}, "2026-07": {}, "2026-08": {}, "2026-09": {}, "2026-10": {}}, "quotes": [{"id": 769291184, "item_id": 48080699, "url": "https://news.ycombinator.com/item?id=48080699", "by": "mixologic", "date": "2026-05-09", "stance": "recommend", "quote": "is about as close as you can get", "excerpt": "https://signpath.org/ is about as close as you can get.", "context": "", "use_case": "Open source code signing", "switched_from": "", "story": "Apple is increasing my cortisol levels"}, {"id": 769273168, "item_id": 48079573, "url": "https://news.ycombinator.com/item?id=48079573", "by": "justinclift", "date": "2026-05-09", "stance": "recommend", "quote": "you can use SignPath for free", "excerpt": "For Open Source Software, you can use SignPath for free: https://signpath.org That's what we did for DB Browser for SQLite (sqlitebrowser.org), and it works well: https://sqlitebrowser.org/blog/signing-windows-executables-our-journey-with-signpath/ SignPath also does stuff for commercial places too (https://signpath.io), but I have no idea of the pricing.", "context": "", "use_case": "", "switched_from": "", "story": "Apple is increasing my cortisol levels"}, {"id": 763097041, "item_id": 47693565, "url": "https://news.ycombinator.com/item?id=47693565", "by": "VadimPR", "date": "2026-04-08", "stance": "recommend", "quote": "We ended up getting our certificate sources from https://signpath.org and have been grateful to them ever since.", "excerpt": "A year ago I used Azure Trusted Signing to codesign FOSS software that I distribute for Windows. It was the cheapest way to give away free software on that platform. A couple of months ago I needed to renew the certificate because it expired, and I ran into the same issue as the author here - verification failed, and they refused to accept any documentation I would give them. Very frustrating experience, especially s", "context": "distributes FOSS software for Windows", "use_case": "code signing certificates", "switched_from": "Azure Trusted Signing", "story": "Microsoft Abruptly Terminates VeraCrypt Account, Halting Windows Updates"}, {"id": 738142544, "item_id": 46133909, "url": "https://news.ycombinator.com/item?id=46133909", "by": "justinclift", "date": "2025-12-03", "stance": "recommend", "quote": "We've been using them for over a year now", "excerpt": "Why do you say that? Things like SignPath exist: https://signpath.io/knowledge-base/introduction We've been using them for over a year now for signing the DB Browser for SQLite executables: https://sqlitebrowser.org/blog/signing-windows-executables-our-journey-with-signpath/", "context": "", "use_case": "Windows executable signing", "switched_from": "", "story": "Microsoft won't let me pay a $24 bill, blocking thousands in Azure spending"}]}