Signing distribution archives might be a good idea

mihies

As per subject, signing distribution archives might be a good idea.
SqlBundle.exe is unsigned but one has to run it to extract setup files.

Brian Donahue

Hello,

The file that you mention is a WinZip self-extractor file, and we do not have the ability to sign it. The installers inside of this file are signed, though. If you need it, we can point you to a ZIP file with the installers for SQL Bundle inside.

mihies

Hi Brian,

Thanks, but there is no need for me as I've already installed the thing. However, in the time of increasing security awarness, running an unsigned executable poses a security risk.