Security Warnings from on Download ("Unknown Publisher")

Microsoft has "improved" security in Windows® XP SP2 and Windows 2003 and Vista, but in doing so has also added some new warnings.

Therefore, all the information int this page only applies to Microsoft Windows XP SP2, 2003 or Vista.

When you download a file you will now be faced with a window like the one below with the details of the download you are attempting: 

   

You should choose Save - running anything from a download location is almost always a bad idea. Additionally, you don't have a backup copy after the download if you run from the Internet. 

So save, e.g. on the desktop. 

Then, sometimes there's more. 

Security Warnings on Installation 

If you run a file that has been download from the Internet, additional warnings are now displayed if there is not a "digital signature". This is associated with the download, even if you rename the file (but not if you copy it to a floppy disk or move it to a Compressed folder, and then back out again). The warning should look like the message below: 

 

Windows checks that programs that have been downloaded from the web have a digital signature attached. Digital signatures simply verify who is the publisher of the software and contain information about the it. If a digital signature is not found on a piece of software, the above dialog box appears.

In order to be a verified publisher we would have to purchase a digital certificate. Not just for Bersoft.com, but for each of our programs. Any application, from any publisher that has not been signed with a digital certificate from a trusted CA (Certificate Authority) displays a message that the publisher is Unknown. This presents a problem for us smaller developers in that a code signing certificate from Verisign costs $400/yr or more.

This is a statement from Microsoft regarding this "Unknown Publisher" security dialog:
"As software publishers create and file their digital signatures, there may be a transitional period during which many reliable software applications will not yet have a digital signature. Even without a digital signature, users are able to click the Run button to confirm they want to install the software. The installation will proceed as normal."

We develop and sell software since 1995, and from any public "WHOIS" service (e.g. register.com) you can verify that bersoft.com is registered since 1997. It's not yesterday. Unlike most of the other Internet Companies that were born at the end of the 20th century, we are still in business - so you can definitely trust us!  Please contact us for any questions.