Buying a certificate actually doesn't help very much. Unless users have
already elected to always trust applications signed with your certificate,
they'll see an almost identical dialog box. It says that "this program has
been signed by ... " etc. but it also displays the same message about "may
not be safe ..", etc. It's not really much more reassuring to most users
than the message they see if the code is not signed.
--
Brendan Reynolds (MVP)
http://brenreyn.blogspot.com
The spammers and script-kiddies have succeeded in making it impossible for
me to use a real e-mail address in public newsgroups. E-mail replies to
this post will be deleted without being read. Any e-mail claiming to be
from brenreyn at indigo dot ie that is not digitally signed by me with a
GlobalSign digital certificate is a forgery and should be deleted without
being read. Follow-up questions should in general be posted to the
newsgroup, but if you have a good reason to send me e-mail, you'll find
a useable e-mail address at the URL above.