We recently launched a software application built using electron where the app does check a firebase database upon launch of the app and for some reason, it was triggering the Norton Antivirus firewall due to it connecting to firestore DB (Firebase.) We proceeded to contact SSL.com where we purchased the EV Code Signing Cert. and they said we also needed the OV Signing Cert. Well, now we have both and also paying 150/mo for cloud signing on top of the $300+ for the EV Code Signing per year). Something doesn’t add up.
Do we really need two signing certificates so we don’t trigger any antivirus during the installation of our application on Windows? Does this seem normal for Code signing to be charged monthly? Perhaps the token on a USB would eliminate this expense?
