We would like to sign the executables for the windows webclient or prowc.exe.
As per the vulnerability report from our security group:
Digitally signing executable and scripts confirms the software author and guarantees that the code has not been altered or corrupted since it was signed by use of a cryptographic hash. Digital signatures ensure the authenticity and integrity of the entities.
The application executable and its components must be digitally signed by a trusted source.
A valid and legitimate application binary should have the below mentioned entries which helps in identifying the binary as a legitimate application belonging to the Company that owns the application rights:
· Legal Trademarks - This identifies the legality of the product and the association of the product with the registered company
Does this assume this includes all Progress DLLs and EXEs?