Brent Simmons has shipped NetNewsWire 3.2.7, and it’s more important than the Google Reader authentication adjustment it provides.
NetNewsWire is now code signed. It has a cryptographic signature, signed with Brent’s certificate. Thanks to this, the application and all of its updates can be trusted as originating from the same cat-loving source. This means that the Keychain will now stop asking permission for new NetNewsWire versions to gain control to the old version’s site passwords. Additionally, the application can be proven to be intact.
However, there’s signing the application and there’s being a good citizen. NetNewsWire has a lovingly eccentric user base. Actually, it has a very wide user base, which would attract a large number of any sort of users, but it’s an application that to its core plays to the delightfully OCD-inflicted. These people like to customize their applications; replacing graphics and templates even beyond NetNewsWire’s news themes, or why not adding, removing or editing localizations. This is their right in much the same way that they may paint a table or a chair after buying it; it might be troublesome with updates, but there are ways around that.
By default, signing your application in Mac OS X includes every file in the application bundle in the cryptographic signature. Brent took the time to exclude the Resources folder as being vital to the integrity of the application. The application executable and a handful of other vital files are still protected while people can mess with the resources without fear of breaking the cryptographic seal that allows Mac OS X to trust or mistrust the application.
If you’re signing your Cocoa application, please consider omitting files in Resources that aren’t vital to the application’s functionality from the cryptographic seal.