upvote
How does paying $100 per year to sign your binary ensure it's not malicious?
reply
It doesn't ensure anything. But it does force an identity trail (you have to prove your identity), and more importantly allows Apple to have a rapid kill switch: If a developer uses their account to distribute malware, Apple revokes the cert and those apps will no longer run on user devices (as soon as the revocation hits).

Should it be $100 per year? No, that is ridiculous and usurious.

reply