I'm a bit confused about the signing process about other parties and
their costs
Please, correct me if I'm wrong:
1- Register in VeriSign
2- By a ACS ID because I haven't
- It costs 350$ (275�) (special offer) and contains 10 signing events.
What is a sign event? 10 signs?
3- Register in symbian sign
4- Send sign my app to the portal and pay a testing house:
-Capgemini 560� and resubmission 280�
-Or MPhasiS 185� and resubmission 160�
-Or NSTL and 250� resubmission 250�
5- If all it's ok, my app is ready to be launched.
So, supossing I choose NSTL and I fail the first test, everything will
cost: 275 + 185 + 160 = 615�.
Have I spent two sigining events? If so, there are 8 signing events
left, and when I run out of events, Should I pay another 350$ to Verisign?
If this is correct I think that the mayority of the small applications
will not afford to spend this cost. Or nor? Any opinion?
Thank you very much.
--
=, (\_/) ,= David Jorge
/`-'---("😉---'-'\
jgs / Bat (___)Factor\ Deimos Space
/.-.-.-/ " " \-.-.-.\
Ronda de Poniente 19
Edificio Fiteni VI
28760 Tres Cantos
Madrid, Spain
Tel +34 91 806 34 50
Fax +34 91 806 34 51
Hi David,
that is what I understand about the costs of the signing process as well.
As far as I know the signing events are only an issue if you are a
testing house. This does not apply to a developer.
For many applications it is sufficient to use the APIs which do not
require Symbian Signing. In this case you can use a self generated
certificate and the user can decide if he wants to trust you. He has to
accept that you program wants to e.G. read user data.
Verisign issues ACS Ids only to companies. So if you are just a person
who does this as a hobby, you can not get a ACS ID even if you are
willing to pay for it!
Best Regards,
Bernd
David Jorge schrieb:
> I'm a bit confused about the signing process about other parties and
> their costs
>
> Please, correct me if I'm wrong:
>
> 1- Register in VeriSign
> 2- By a ACS ID because I haven't
> - It costs 350$ (275�) (special offer) and contains 10 signing events.
> What is a sign event? 10 signs?
> 3- Register in symbian sign
> 4- Send sign my app to the portal and pay a testing house:
> -Capgemini 560� and resubmission 280�
> -Or MPhasiS 185� and resubmission 160�
> -Or NSTL and 250� resubmission 250�
> 5- If all it's ok, my app is ready to be launched.
>
> So, supossing I choose NSTL and I fail the first test, everything will
> cost: 275 + 185 + 160 = 615�.
>
> Have I spent two sigining events? If so, there are 8 signing events
> left, and when I run out of events, Should I pay another 350$ to Verisign?
>
> If this is correct I think that the mayority of the small applications
> will not afford to spend this cost. Or nor? Any opinion?
>
> Thank you very much.
>
> --
> =, (\_/) ,= David Jorge
> /`-'---("😉---'-'\
> jgs / Bat (___)Factor\ Deimos Space
> /.-.-.-/ " " \-.-.-.\
>
> Ronda de Poniente 19
> Edificio Fiteni VI
> 28760 Tres Cantos
> Madrid, Spain
> Tel +34 91 806 34 50
> Fax +34 91 806 34 51
Thnks Bernd
I'm working in a little enterprise that develops mobile apps. So having
an ACS ID is needed.
I'm still confused about what is a sign event in VeriSign. So if I pay a
ACS ID, I could sign all the apps I like during my year of contract,
could I?
And about autosigning:
AFAIK even autosigning my app it's still untrusted and it can't have
access to the protected capabilities.
And of course, my app needs to use some of that protected capabilities.
Bernd Wiegmann wrote:
> Hi David,
>
> that is what I understand about the costs of the signing process as well.
>
> As far as I know the signing events are only an issue if you are a
> testing house. This does not apply to a developer.
>
> For many applications it is sufficient to use the APIs which do not
> require Symbian Signing. In this case you can use a self generated
> certificate and the user can decide if he wants to trust you. He has to
> accept that you program wants to e.G. read user data.
>
> Verisign issues ACS Ids only to companies. So if you are just a person
> who does this as a hobby, you can not get a ACS ID even if you are
> willing to pay for it!
>
> Best Regards,
> Bernd
>
> David Jorge schrieb:[color=green]
>> I'm a bit confused about the signing process about other parties and
>> their costs
>>
>> Please, correct me if I'm wrong:
>>
>> 1- Register in VeriSign
>> 2- By a ACS ID because I haven't
>> - It costs 350$ (275�) (special offer) and contains 10 signing events.
>> What is a sign event? 10 signs?
>> 3- Register in symbian sign
>> 4- Send sign my app to the portal and pay a testing house:
>> -Capgemini 560� and resubmission 280�
>> -Or MPhasiS 185� and resubmission 160�
>> -Or NSTL and 250� resubmission 250�
>> 5- If all it's ok, my app is ready to be launched.
>>
>> So, supossing I choose NSTL and I fail the first test, everything will
>> cost: 275 + 185 + 160 = 615�.
>>
>> Have I spent two sigining events? If so, there are 8 signing events
>> left, and when I run out of events, Should I pay another 350$ to Verisign?
>>
>> If this is correct I think that the mayority of the small applications
>> will not afford to spend this cost. Or nor? Any opinion?
>>
>> Thank you very much.
>>
>> --
>> =, (\_/) ,= David Jorge
>> /`-'---("😉---'-'\
>> jgs / Bat (___)Factor\ Deimos Space
>> /.-.-.-/ " " \-.-.-.\
>>
>> Ronda de Poniente 19
>> Edificio Fiteni VI
>> 28760 Tres Cantos
>> Madrid, Spain
>> Tel +34 91 806 34 50
>> Fax +34 91 806 34 51[/color]
--
--
=, (\_/) ,= David Jorge
/`-'---("😉---'-'\
jgs / Bat (___)Factor\ Deimos Space
/.-.-.-/ " " \-.-.-.\
Ronda de Poniente 19
Edificio Fiteni VI
28760 Tres Cantos
Madrid, Spain
Tel +34 91 806 34 50
Fax +34 91 806 34 51
Hi David,
there are a few user grantable capabilities the user can grant to an
untrusted application at install time. There is a FAQ at
www.symbiansigned.com which gives some details about that.
When you want your application to get Symbian Signed, you have to use
your ACS id to sign it. Then it is sent to the test house and they can
verify that it is the application you sent and that it was sent by you.
For the final signed sis file, the test house signs it with their id. As
fas as I know this is a signing event for them but not for you.
A developer can use the ACS Id as many time as he likes during the one
year period without using any signing events.
Best Regards,
Bernd
David Jorge schrieb:
> Thnks Bernd
>
>
> I'm working in a little enterprise that develops mobile apps. So having
> an ACS ID is needed.
>
> I'm still confused about what is a sign event in VeriSign. So if I pay a
> ACS ID, I could sign all the apps I like during my year of contract,
> could I?
>
> And about autosigning:
>
> AFAIK even autosigning my app it's still untrusted and it can't have
> access to the protected capabilities.
>
> And of course, my app needs to use some of that protected capabilities.
>
> Bernd Wiegmann wrote:
>[color=green]
>> Hi David,
>>
>> that is what I understand about the costs of the signing process as well.
>>
>> As far as I know the signing events are only an issue if you are a
>> testing house. This does not apply to a developer.
>>
>> For many applications it is sufficient to use the APIs which do not
>> require Symbian Signing. In this case you can use a self generated
>> certificate and the user can decide if he wants to trust you. He has to
>> accept that you program wants to e.G. read user data.
>>
>> Verisign issues ACS Ids only to companies. So if you are just a person
>> who does this as a hobby, you can not get a ACS ID even if you are
>> willing to pay for it!
>>
>> Best Regards,
>> Bernd
>>
>> David Jorge schrieb:
>>[color=darkred]
>>> I'm a bit confused about the signing process about other parties and
>>> their costs
>>>
>>> Please, correct me if I'm wrong:
>>>
>>> 1- Register in VeriSign
>>> 2- By a ACS ID because I haven't
>>> - It costs 350$ (275�) (special offer) and contains 10 signing
>>> events.
>>> What is a sign event? 10 signs?
>>> 3- Register in symbian sign
>>> 4- Send sign my app to the portal and pay a testing house:
>>> -Capgemini 560� and resubmission 280�
>>> -Or MPhasiS 185� and resubmission 160�
>>> -Or NSTL and 250� resubmission 250�
>>> 5- If all it's ok, my app is ready to be launched.
>>>
>>> So, supossing I choose NSTL and I fail the first test, everything will
>>> cost: 275 + 185 + 160 = 615�.
>>>
>>> Have I spent two sigining events? If so, there are 8 signing events
>>> left, and when I run out of events, Should I pay another 350$ to
>>> Verisign?
>>>
>>> If this is correct I think that the mayority of the small applications
>>> will not afford to spend this cost. Or nor? Any opinion?
>>>
>>> Thank you very much.
>>>
>>> --
>>> =, (\_/) ,= David Jorge
>>> /`-'---("😉---'-'\
>>> jgs / Bat (___)Factor\ Deimos Space
>>> /.-.-.-/ " " \-.-.-.\
>>>
>>> Ronda de Poniente 19
>>> Edificio Fiteni VI
>>> 28760 Tres Cantos
>>> Madrid, Spain
>>> Tel +34 91 806 34 50
>>> Fax +34 91 806 34 51[/color]
>
>
>[/color]
Hi David,
About the ACS ID. Once you paid 350$, you will get tools to generate cert
and key file 10 times. Then you can use this ACSID cert and key to sign sis
for unlimited times in 1 year. Then those ACSID signed sis send to testing
house for symbian signed.
Regards
wha
"David Jorge" <[email protected]> wrote in message
news:gACB2UOdGHA.1896@extapps30...
> Thnks Bernd
>
>
> I'm working in a little enterprise that develops mobile apps. So having an
> ACS ID is needed.
>
> I'm still confused about what is a sign event in VeriSign. So if I pay a
> ACS ID, I could sign all the apps I like during my year of contract, could
> I?
>
> And about autosigning:
>
> AFAIK even autosigning my app it's still untrusted and it can't have
> access to the protected capabilities.
>
> And of course, my app needs to use some of that protected capabilities.
>
> Bernd Wiegmann wrote:[color=green]
>> Hi David,
>>
>> that is what I understand about the costs of the signing process as well.
>>
>> As far as I know the signing events are only an issue if you are a
>> testing house. This does not apply to a developer.
>>
>> For many applications it is sufficient to use the APIs which do not
>> require Symbian Signing. In this case you can use a self generated
>> certificate and the user can decide if he wants to trust you. He has to
>> accept that you program wants to e.G. read user data.
>>
>> Verisign issues ACS Ids only to companies. So if you are just a person
>> who does this as a hobby, you can not get a ACS ID even if you are
>> willing to pay for it!
>>
>> Best Regards,
>> Bernd
>>
>> David Jorge schrieb:[color=darkred]
>>> I'm a bit confused about the signing process about other parties and
>>> their costs
>>>
>>> Please, correct me if I'm wrong:
>>>
>>> 1- Register in VeriSign
>>> 2- By a ACS ID because I haven't
>>> - It costs 350$ (275�) (special offer) and contains 10 signing
>>> events.
>>> What is a sign event? 10 signs?
>>> 3- Register in symbian sign
>>> 4- Send sign my app to the portal and pay a testing house:
>>> -Capgemini 560� and resubmission 280�
>>> -Or MPhasiS 185� and resubmission 160�
>>> -Or NSTL and 250� resubmission 250�
>>> 5- If all it's ok, my app is ready to be launched.
>>>
>>> So, supossing I choose NSTL and I fail the first test, everything will
>>> cost: 275 + 185 + 160 = 615�.
>>>
>>> Have I spent two sigining events? If so, there are 8 signing events
>>> left, and when I run out of events, Should I pay another 350$ to
>>> Verisign?
>>>
>>> If this is correct I think that the mayority of the small applications
>>> will not afford to spend this cost. Or nor? Any opinion?
>>>
>>> Thank you very much.
>>>
>>> --
>>> =, (\_/) ,= David Jorge
>>> /`-'---("😉---'-'\
>>> jgs / Bat (___)Factor\ Deimos Space
>>> /.-.-.-/ " " \-.-.-.\
>>>
>>> Ronda de Poniente 19
>>> Edificio Fiteni VI
>>> 28760 Tres Cantos
>>> Madrid, Spain
>>> Tel +34 91 806 34 50
>>> Fax +34 91 806 34 51[/color]
>
>
> --
> --
> =, (\_/) ,= David Jorge
> /`-'---("😉---'-'\
> jgs / Bat (___)Factor\ Deimos Space
> /.-.-.-/ " " \-.-.-.\
>
> Ronda de Poniente 19
> Edificio Fiteni VI
> 28760 Tres Cantos
> Madrid, Spain
> Tel +34 91 806 34 50
> Fax +34 91 806 34 51[/color]
Hi David
I'm confirming Wha's analysis, but that sounds right.
Re auto-sigining: YOu need to sign the SIS file you submit with the ACS so
that the test house can identify it is from you. The ACS is however not
signed with the correct root certificate, so you can't be granted
capabilities with this.
For testing purposes (only) you can get a Developer certificate from
symbiansigned which allows you to sign SIS files for use on a particular set
of nominated (IMEI) phones during development - more information on the site
This is the only form of auto-signing that gives you any sort capabilities,
unless you are one of the select few companies who can self-sign (Self
signeers are trusted to run their own testing and get the final SIS file
signed directly by verisign. That costs additional, and is reasonable if you
want to release many apps, or many revisions of an app over a year without
huge per-app testing costs.)
Regards
H
"David Jorge" <[email protected]> wrote in message
news:gACB2UOdGHA.1896@extapps30...
> Thnks Bernd
>
>
> I'm working in a little enterprise that develops mobile apps. So having
> an ACS ID is needed.
>
> I'm still confused about what is a sign event in VeriSign. So if I pay a
> ACS ID, I could sign all the apps I like during my year of contract,
> could I?
>
> And about autosigning:
>
> AFAIK even autosigning my app it's still untrusted and it can't have
> access to the protected capabilities.
>
> And of course, my app needs to use some of that protected capabilities.
>
> Bernd Wiegmann wrote:[color=green]
> > Hi David,
> >
> > that is what I understand about the costs of the signing process as[/color]
well.[color=green]
> >
> > As far as I know the signing events are only an issue if you are a
> > testing house. This does not apply to a developer.
> >
> > For many applications it is sufficient to use the APIs which do not
> > require Symbian Signing. In this case you can use a self generated
> > certificate and the user can decide if he wants to trust you. He has to
> > accept that you program wants to e.G. read user data.
> >
> > Verisign issues ACS Ids only to companies. So if you are just a person
> > who does this as a hobby, you can not get a ACS ID even if you are
> > willing to pay for it!
> >
> > Best Regards,
> > Bernd
> >
> > David Jorge schrieb:[color=darkred]
> >> I'm a bit confused about the signing process about other parties and
> >> their costs
> >>
> >> Please, correct me if I'm wrong:
> >>
> >> 1- Register in VeriSign
> >> 2- By a ACS ID because I haven't
> >> - It costs 350$ (275�) (special offer) and contains 10 signing[/color][/color]
events.[color=green][color=darkred]
> >> What is a sign event? 10 signs?
> >> 3- Register in symbian sign
> >> 4- Send sign my app to the portal and pay a testing house:
> >> -Capgemini 560� and resubmission 280�
> >> -Or MPhasiS 185� and resubmission 160�
> >> -Or NSTL and 250� resubmission 250�
> >> 5- If all it's ok, my app is ready to be launched.
> >>
> >> So, supossing I choose NSTL and I fail the first test, everything will
> >> cost: 275 + 185 + 160 = 615�.
> >>
> >> Have I spent two sigining events? If so, there are 8 signing events
> >> left, and when I run out of events, Should I pay another 350$ to[/color][/color]
Verisign?[color=green][color=darkred]
> >>
> >> If this is correct I think that the mayority of the small applications
> >> will not afford to spend this cost. Or nor? Any opinion?
> >>
> >> Thank you very much.
> >>
> >> --
> >> =, (\_/) ,= David Jorge
> >> /`-'---("😉---'-'\
> >> jgs / Bat (___)Factor\ Deimos Space
> >> /.-.-.-/ " " \-.-.-.\
> >>
> >> Ronda de Poniente 19
> >> Edificio Fiteni VI
> >> 28760 Tres Cantos
> >> Madrid, Spain
> >> Tel +34 91 806 34 50
> >> Fax +34 91 806 34 51[/color]
>
>
> --
> --
> =, (\_/) ,= David Jorge
> /`-'---("😉---'-'\
> jgs / Bat (___)Factor\ Deimos Space
> /.-.-.-/ " " \-.-.-.\
>
> Ronda de Poniente 19
> Edificio Fiteni VI
> 28760 Tres Cantos
> Madrid, Spain
> Tel +34 91 806 34 50
> Fax +34 91 806 34 51[/color]
Hi David
Yes, Wha's analysis is correct. The content ID that is consumed is the one
where the SIS file is submitted to Verisign by the test house - so it comes
from the Test house's content IDs, not from those associated with your ACS
publisher ID. You can sign unlimited SIS files with the ID within its
lifetime.
I have created a public FAQ on this.
Regards
Hamish
"Hamish Willee" <[email protected]> wrote in message
news:f2eVBBWfGHA.1912@extapps30...
> Hi David
>
> I'm confirming Wha's analysis, but that sounds right.
>
> Re auto-sigining: YOu need to sign the SIS file you submit with the ACS so
> that the test house can identify it is from you. The ACS is however not
> signed with the correct root certificate, so you can't be granted
> capabilities with this.
> For testing purposes (only) you can get a Developer certificate from
> symbiansigned which allows you to sign SIS files for use on a particular
set
> of nominated (IMEI) phones during development - more information on the
site
>
> This is the only form of auto-signing that gives you any sort
capabilities,
> unless you are one of the select few companies who can self-sign (Self
> signeers are trusted to run their own testing and get the final SIS file
> signed directly by verisign. That costs additional, and is reasonable if
you
> want to release many apps, or many revisions of an app over a year without
> huge per-app testing costs.)
>
> Regards
> H
>
> "David Jorge" <[email protected]> wrote in message
> news:gACB2UOdGHA.1896@extapps30...[color=green]
> > Thnks Bernd
> >
> >
> > I'm working in a little enterprise that develops mobile apps. So having
> > an ACS ID is needed.
> >
> > I'm still confused about what is a sign event in VeriSign. So if I pay a
> > ACS ID, I could sign all the apps I like during my year of contract,
> > could I?
> >
> > And about autosigning:
> >
> > AFAIK even autosigning my app it's still untrusted and it can't have
> > access to the protected capabilities.
> >
> > And of course, my app needs to use some of that protected capabilities.
> >
> > Bernd Wiegmann wrote:[color=darkred]
> > > Hi David,
> > >
> > > that is what I understand about the costs of the signing process as[/color]
> well.[color=darkred]
> > >
> > > As far as I know the signing events are only an issue if you are a
> > > testing house. This does not apply to a developer.
> > >
> > > For many applications it is sufficient to use the APIs which do not
> > > require Symbian Signing. In this case you can use a self generated
> > > certificate and the user can decide if he wants to trust you. He has[/color][/color]
to[color=green][color=darkred]
> > > accept that you program wants to e.G. read user data.
> > >
> > > Verisign issues ACS Ids only to companies. So if you are just a person
> > > who does this as a hobby, you can not get a ACS ID even if you are
> > > willing to pay for it!
> > >
> > > Best Regards,
> > > Bernd
> > >
> > > David Jorge schrieb:
> > >> I'm a bit confused about the signing process about other parties and
> > >> their costs
> > >>
> > >> Please, correct me if I'm wrong:
> > >>
> > >> 1- Register in VeriSign
> > >> 2- By a ACS ID because I haven't
> > >> - It costs 350$ (275?) (special offer) and contains 10 signing[/color]
> events.[color=darkred]
> > >> What is a sign event? 10 signs?
> > >> 3- Register in symbian sign
> > >> 4- Send sign my app to the portal and pay a testing house:
> > >> -Capgemini 560? and resubmission 280?
> > >> -Or MPhasiS 185? and resubmission 160?
> > >> -Or NSTL and 250? resubmission 250?
> > >> 5- If all it's ok, my app is ready to be launched.
> > >>
> > >> So, supossing I choose NSTL and I fail the first test, everything[/color][/color]
will[color=green][color=darkred]
> > >> cost: 275 + 185 + 160 = 615?.
> > >>
> > >> Have I spent two sigining events? If so, there are 8 signing events
> > >> left, and when I run out of events, Should I pay another 350$ to[/color]
> Verisign?[color=darkred]
> > >>
> > >> If this is correct I think that the mayority of the small[/color][/color]
applications[color=green][color=darkred]
> > >> will not afford to spend this cost. Or nor? Any opinion?
> > >>
> > >> Thank you very much.
> > >>
> > >> --
> > >> =, (\_/) ,= David Jorge
> > >> /`-'---("😉---'-'\
> > >> jgs / Bat (___)Factor\ Deimos Space
> > >> /.-.-.-/ " " \-.-.-.\
> > >>
> > >> Ronda de Poniente 19
> > >> Edificio Fiteni VI
> > >> 28760 Tres Cantos
> > >> Madrid, Spain
> > >> Tel +34 91 806 34 50
> > >> Fax +34 91 806 34 51
> >
> >
> > --
> > --
> > =, (\_/) ,= David Jorge
> > /`-'---("😉---'-'\
> > jgs / Bat (___)Factor\ Deimos Space
> > /.-.-.-/ " " \-.-.-.\
> >
> > Ronda de Poniente 19
> > Edificio Fiteni VI
> > 28760 Tres Cantos
> > Madrid, Spain
> > Tel +34 91 806 34 50
> > Fax +34 91 806 34 51[/color]
>
>[/color]