Skip to content

Glossary: Endpoint and Application Security

Code signing

Also written: signing a release, signature

Signing a release with a private key so servers can verify, with the public key, who built it and that it hasn't changed. It doesn't prove the code is safe, and the signing key must be guarded.

Where the book teaches it

Related terms

private key and public keyAuthenticodeBuild pipeline