README: mention codesigning and explain how to install Liana's dmg anyways

This commit is contained in:
Antoine Poinsot 2022-12-18 11:45:21 +01:00
parent b63416b884
commit b314796075
No known key found for this signature in database
GPG Key ID: E13FC145CD3F4304

View File

@ -54,6 +54,14 @@ as on [his Twitter profile](https://twitter.com/darosior) or his [personal
website](http://download.darosior.ninja/darosior.pub). It is recommended you verify your download
against this key.
Note that we do not codesign ("notarize") the released binaries for now. Windows or macOS may
prevent you from installing the software. On macOS, you would get a warning saying the developer of
this application couldn't be verified. This is because we didn't register with Apple prior to
releasing the application. Make sure you verified the GPG signature of the download, then add an
exception for Liana by following the steps from [this Apple support
guide](https://support.apple.com/en-us/HT202491) (section "If you want to open an app that hasnt
been notarized or is from an unidentified developer").
Releases of Liana are reproducibly built. See [`contrib/reproducible`](contrib/reproducible) for
details and instructions if you want to check a release.