windows - IE9 SmartScreen 警告，尽管遵循所有建议

Question

我们提供了一个 Windows 程序，可从我们的网站下载为 InstallShield EXE。

当运行 IE9 的用户尝试下载并运行我们的软件时，他们会在屏幕底部看到以下消息:

PROGRAMNAME.exe is not commonly downloaded and could harm your computer.
[DELETE] [ACTIONS] [VIEW DOWNLOADS]

我读过 http://blogs.msdn.com/b/ie/archive/2011/03/22/smartscreen-174-application-reputation-building-reputation.aspx

它表明:

• 使用验证码签名。
• 确保下载不会被检测为恶意软件。
• 申请 Windows Logo 。

我们已经完成了所有这三件事。我们的 EXE 使用 authenticode 签名进行数字签名(警告消息上方的栏是橙色的，而不是红色的，表明 IE9 识别并验证了签名)。我们尝试过的任何防病毒程序均未将我们的下载检测为恶意软件。我们已经申请并收到了 Windows Logo 。

到目前为止，我们的大多数客户都没有使用 IE 9。但这对那些使用 IE 9 的客户来说非常麻烦。对此我们还有什么可以做的吗，还是我们只需要等到足够多的客户下载了这个软件，这条信息才会消失？

(这是否意味着当我们发布新版本时，所有 IE 9 用户都会再次收到此消息，直到有足够多的用户下载它？)

2011-06-14 更新:

谢谢，@EricLaw-MSFT。网址是 http://dakim.dakiminc.netdna-cdn.com/DakimBrainFitness.exe . (它位于 http://www.dakim.com 上的“下载免费试用版”按钮上。)

我们提供可下载试用版的时间很短。我们的主要分发方法是安装 DVD。

Answer 1

扩展验证代码签名证书不需要根据 this 慢慢建立声誉。帖子:

Reputation is generated and assigned to digital certificates as well as specific files. Digital certificates allow data to be aggregated and assigned to a single certificate rather than many individual programs. Although not required, programs signed by an EV code signing certificate can immediately establish reputation with SmartScreen reputation services even if no prior reputation exists for that file or publisher. EV code signing certificates also have a unique identifier which makes it easier to maintain reputation across certificate renewals. Only Authenticode Certificates issued by a CA that is a member of the Windows Root Certificate Program can establish reputation.

At this time, Symantec and DigiCert are offering EV code signing certificates.

为了改进我的回答，我添加了一个指向 similar question 的链接。我问并最终回答了自己。