Issue activity log

2019-12-04 21:03 Created Release stable version with previous trusted certificate
Component Setup
Severity Enhancement
Comment https://winscp.net/forum/viewtopic.php?t=28543
https://winscp.net/forum/viewtopic.php?t=28537
https://winscp.net/forum/viewtopic.php?t=28537
2019-12-04 21:08 Comment As our existing code signing certificate is expiring on 2020-01-23, we have renewed it.

Though we didn't know that Microsoft Defender SmartScreen will consider the renewed certificate as a new one and will trigger a warning:
"Windows Defender SmartScreen prevented an unrecognized app from starting"

The warning will be displayed until the certificate builds a reputation. Criteria for that are not known. See also: https://security.stackexchange.com/q/222140/43677

Until that reputation issue is resolved, we plan to release a new version of WinSCP stable branch (5.15) with the old certificate. The new certificate will be used only for the development branch (5.16) for now.

Though by installing a version that uses the new certificate you are helping us building the reputation of the new certificate. So please consider that.

To dismiss the warning, click "More Info" and then "Run anyway".

If you want, you can verify an integrity of the installer:
https://winscp.net/eng/docs/installation#verifying
2019-12-04 21:10 Comment https://winscp.net/tracker/530#c16
2019-12-04 21:12 Comment Related:
https://winscp.net/forum/viewtopic.php?t=28552
Summary Release stable version with previous trusted certificate to avoid "Windows Defender SmartScreen prevented an unrecognized app from starting"
2019-12-05 11:45 Status RESOLVED
Implemented in 5.15.9
Resolution FIXED
Comment Released.
2022-10-05 09:03 Comment As our existing code signing certificate is expiring on 2020-01-23, we have renewed it.·  ·  Though we didn't know that Microsoft Defender SmartScreen will consider the renewed certificate as a new one and will trigger a warning:·  //"Windows Defender SmartScreen prevented an unrecognized app from starting"  //   ·  The warning will be displayed until the certificate builds a reputation. Criteria for that are not known. See also: https://security.stackexchange.com/q/222140/43677·  ·  Until that reputation issue is resolved, we plan to release a new version of WinSCP stable branch (5.15.x) with the old certificate. The new certificate will be used only for the development branch (5.16.x) for now.·  ·  Though by installing a version that uses the new certificate you are helping us building the reputation of the new certificate. So please consider that.·  ·  To dismiss the warning, click //"More Info"// and then //"Run anyway"./  /.   ·  If you want, you can verify an integrity of the installer:·  https://winscp.net/eng/docs/installation#verifying