Windows Defender SmartScreen

[simonhamp]

The first hurdle when trying to run a compiled php.exe seems to be this

Clicking the 'More info' link reveals this:

Obviously, we can't expect every Windows user to disable SmartScreen. I'm guessing there's some sort of code signing that's needed to overcome this?

[crazywhalecc]

Unfortunately I know nothing about windows executable signing. A self-signed certificate may be able to sign, but may not avoid SmartScreen. In addition, using a third-party issuance of compiled php.exe may also be a violation of the agreement?

[simonhamp]

Which agreement?

[crazywhalecc]

@simonhamp I just assumed that I used a self-signed certificate and uploaded php.exe on static-php.dev. I don't know if doing so would violate the PHP License, GPL or other specific agreements or licenses.

The problem depends on how to avoid SmartScreen. If SmartScreen can be avoided by signing (no matter who's signature), and doing so doesn't violate any agreements or licenses, that's OK.

But how to sign raises another issue. Even if I can sign, how should others sign when compiling locally using static-php? 😵‍💫

[simonhamp]

Yeh I understand. I will do more digging