EV Code Sign, not needed anymore?

[Zapan15]

Hey,

we have been using EV Code Signing for some time to sign our Windows installers and other executable files. This month (August 2024), we had to renew our certificate. However, while reviewing some listings where we planned to purchase the certificate, we came across the following information:

Note: In March 2024, Microsoft changed the way MS SmartScreen interacts with EV Code Signing certificates. While EV Code Signing certificates remain the highest trust certificates available, they no longer instantly remove SmartScreen warnings.

This is quite surprising and makes EV Code Signing seem obsolete, as the primary reason for purchasing it was to eliminate the Windows SmartScreen warnings.

So, what now? It appears that Microsoft has introduced a new process that should be used going forward:

• Microsoft File Submission
• Trusted Root Program Requirements

Additional discussions on the topic:

• Stack Overflow Discussion
• Reddit Discussion
• Tech Community Article

Question:

Has anyone already experienced this change? If you’ve been using EV Code Signing, what are your plans moving forward?