来自Windows智能屏幕的警告 [英] Warning from Windows smart screen
问题描述
大家好，
我们有一个在我们组织内部分发的应用程序。
We have an application which is distributed internally in our organization.
此exe由我们的内部签署CA不使用EV。
This exe is signed by our internal CA not using EV.
很明显，当从本地网站托管/应用程序下载文件时会显示警告。
So obviously when the file is downloaded from our local web hosting/application a warning is shown.
所以现在我们只是压缩文件，用户可以毫无问题地从中安装。
So now we just zipped the file and users were able to install from that without any problem.
但最近发生了一件非常奇怪的事情。
But a very strange thing happened recently.
我们最近升级了即使从zip中提取，应用程序也会收到此错误。我们的升级仅包括功能更新，没有进行基础设施更改。
The recent upgrade of our application is getting this error even when extracted from the zip. Our upgrade only consisted of functionality updates , no infrastructural changes were done.
但是从网络共享或任何基于网络的文件共享软件（如dropbox）直接打开时，相同的邮政编码不是创建任何问题。
But the same zip when directly opened from a network share or from any web based file sharing software like dropbox is not creating any problem.
只有从我们的内部网络托管应用程序下载zip时才会出现错误。
The error is only coming when the zip is downloaded from our internal web hosting application.
我无法从我们的网络托管应用程序中找出错误即将发生的原因。
I am not able to find out why from our web hosting application the error is coming.
智能屏幕是否跟踪文件/ zip的下载位置？
Does the smart screen tracks from where the file/zip is downloaded too ?
即如果从Dropbox下载它是安全的，如果从我们的内部Web应用程序下载它是不安全的。
i.e. if downloaded from dropbox it is safe and if downloaded from our internal web application it is unsafe.
我理解文件签名和EV策略签名的智能屏幕概念。但是我无法理解为什么从某个Web应用程序位置创建错误。
I understand the smart screen concepts of file signing and signing with EV policy. But i am not able to comprehend on why from a certain web application location it is creating the error.
最好的问候，
Saurav
推荐答案
您可能有一个解压缩程序之前没有保留区域标识符，现在这样做的文件会在解压缩后触发智能屏幕提示。请参阅 操作
区域标识符以指定文件从何处下载。区域标识符由webbrowsers在下载时设置，第三像zip实用程序这样的派对程序应该保留它以提高安全性。
You could have an unzip program that did not preserve the zone identifier before, and now does so files trigger a smart screen prompt after decompressing. See Manipulating the zone identifier to specify where a file was download from. Zone identifiers are set by webbrowsers when downloading, and third party programs like zip utilities are supposed to preserve this to improve security.
请求您的客户
取消阻止该文件。
Ask your client to unblock the file after downloading.
这篇关于来自Windows智能屏幕的警告的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
