Application Signing is a mechanism whereby digital certificates are used to provide tamper proof information about how much an application can be trusted. Symbian's system-wide Platform Security model uses the information in the certificate to determine whether to grant access to sensitive APIs and restricted areas of the file system, and whether or not to display installation warnings.
Signing Programs manage how developers get their applications signed with "trusted" certificates (both during development and for commercial release). The Symbian community uses the Symbian Signed program for applications packaged in .sis files, and Apps:Java Verified for validating Java ME applications. In future there may be other programs.
A vendor may also self-sign their application. In this case the certificate does not trace back to a trusted root certificate and is "untrusted" (and may only have the user-grantable capabilities). Self signing is common because many manufacturers allow only signed applications to be installed.
This category contains general topics about Application Signing. New readers should start with the topic: Certification and Platform Security.
This category has the following 2 subcategories, out of 2 total.