docs(desktop): Windows is unsigned too, and the no-warning path goes first - #466
Merged
Conversation
…first Two corrections and one reordering. WINDOWS SIGNING IS DROPPED AS WELL, and it was left as "a separate decision, still open" one round too long. Azure Trusted Signing is ~$120/yr -- MORE than Apple's $99 -- and since 2024 an EV certificate no longer grants an instant SmartScreen pass: reputation accrues from download volume over time, so a new certificate on a young project leaves the warning in place for a while regardless. Paying more to still be warned about is the worst of the three options. Every place that named only the Apple cost now names both, because a page that mentioned one would leave a reader assuming the other had simply been forgotten. THE NO-WARNING PATH LEADS. Someone reading this page is deciding whether to proceed past a security warning, and the first thing they should meet is that there is a route with no warning at all -- the README's "Try it in five minutes", where pip and uv fetch the published wheels and nothing is downloaded as an application, so no operating system objects. It is honest about the trade rather than selling it: that path needs a terminal and Python 3.11+, which is exactly the friction the desktop app exists to remove. AND THE INSTRUCTIONS ARE ACTUALLY INSTRUCTIONS. "Click Open Anyway" is not one. Someone who has never done this needs to be told where the setting is, that it takes two confirmations, and that on macOS Sequoia and later the right-click-Open shortcut no longer works -- Apple removed it deliberately, and a page still recommending it sends people in a circle. Windows gets the step that actually matters and is easy to miss: Unblock the .zip in Properties BEFORE extracting. Skip it and Windows marks every extracted file, so the prompt returns on a later launch and the user concludes the first bypass did not take. It also says to extract somewhere the user owns and NOT into Program Files -- keel does not need administrator rights and should not be given them. Reflected in all three places a downloader meets: the READ ME FIRST inside the .dmg (rebuilt and mounted to confirm), docs/desktop-install.md, and the release notes. 4041 passed, 3 skipped (4 new pins: both prices named, the no-warning path first, and the per-OS steps present). ruff clean repo-wide. Refs #438, #18. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Refs #438 (D5). Companion to CodeGateSoftware/keeltrading.com#27 (merged).
This branch was pushed earlier but the PR was never opened — my error. The site side merged; this side has been sitting unreviewed.
Windows signing is dropped as well
Azure Trusted Signing is ~$120/yr — more than Apple's $99 — and since 2024 an EV certificate no longer grants an instant SmartScreen pass: reputation accrues from download volume over time, so a new certificate on a young project leaves the warning in place for a while regardless.
Paying more to still be warned about is the worst of the three options. Every place that named only the Apple cost now names both — a page mentioning one would leave a reader assuming the other had simply been forgotten.
The no-warning path leads
Someone reading this is deciding whether to click past a security warning, and "there is a route with no warning at all" is the most useful thing to hand them at that exact moment — not four paragraphs about what Apple charges. The README's "Try it in five minutes" is now the first section, honest about the trade rather than selling it: it needs a terminal and Python 3.11+, which is precisely the friction the desktop app exists to remove.
And the instructions are actually instructions
"Click Open Anyway" is not one.
macOS runs from opening the
.dmgthrough both confirmations, and says that on Sequoia (15) and later the right-click → Open shortcut no longer works — Apple removed it deliberately, and a page still recommending it sends people in a circle.Windows gets the step that matters and is easiest to miss: Unblock the
.zipin Properties before extracting. Skip it and Windows marks every extracted file, so the prompt returns on a later launch and the user concludes the first bypass did not take. It also says to extract somewhere the user owns and not intoProgram Files— keel does not need administrator rights and should not be given them.Reflected in all three places a downloader meets: the
READ ME FIRSTinside the.dmg(rebuilt and mounted to confirm),docs/desktop-install.md, and the release notes.4041 passed, 3 skipped (4 new pins: both prices named, the no-warning path first, and the per-OS steps present).
ruff checkclean repo-wide.🤖 Generated with Claude Code