Hacker News Reader

> Also why is notorization a completely different process from code signing

Because they do completely different things. Signing is a proof that you were the one to write and package that software; notarisation is an online security check for malware. If I recall, you still sign but do not notarise when distributing to the Mac App Store.

View on HN

Ok, so the certificate used to sign the package is generated by Apple, why can't I just use that to prove my identity for notarization?

Or maybe simpler, why can't Apple just do code sign and notarization with one single cli call, with one set of credentials?

Google Play does this under the hook, I don't even think about it. iOS is similar, Transponder app does everything in one go.

Reply on news.ycombinator.com