They can
even specify who the publisher must be.
CAUTION CAUTION
110
Designing Next-Generation User Experiences Part I
Trusted publishers
Certificate authorities offer trusted publisher certificates that you can use when you deploy your
application using ClickOnce. These certificates include a public key that a user??™s computer can use
to verify (via public key cryptography techniques) that it is transferring data from a computer that
is controlled by the entity that bought the certificate and not by an imposter.
Using a trusted publisher certificate may mean the difference between a true ???click once??? experience
for the user or viewing a message box with a warning that the publisher is unknown. And
even if a warning does appear, it may be a lesser warning.
Trusted publisher certificates can be purchased from several sources, including:
n VeriSign: Prices start at about $400 for a 1-year certificate, but they also insure it. For
more information check out www.verisign.com.
n InstantSSL: Certificates from InstantSSL start at about $100 for a year. Check out
www.instantssl.com.
n Entrust: They sell certificates starting at about $160 per year. Their homepage is
www.entrust.com.
VeriSign and InstantSSL also issue free certificates that are good for 90 days and that you can use
for testing purposes.
Pages:
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232