Korean: [기술 입장문] 오픈소스 개발자와 Windows 보안 정책의 미래에 대한 닷넷데브 공동 입장
.NET Dev is a developer community formed in 2019, dedicated to open knowledge sharing and collaboration. We believe the future of Windows must grow with the open-source ecosystem, not apart from it.
Windows 11 introduced Smart App Control (SAC), which blocks applications without code signing certificates. While strengthening security is reasonable, the current policy unintentionally forces non-commercial open-source developers to bear signing costs, effectively excluding them from the Windows environment.
For example, the open-source security utility TableCloth, developed by a .NET Dev community member, is currently blocked solely due to its lack of a paid signing certificate, despite its purpose being to enhance user security.
Additionally, widely used tools such as Snoop (WPF UI Inspector) may soon face similar restrictions. This is not merely inconvenient — it indicates a structural issue where essential open-source tools may disappear from Windows altogether.
If the cost of trust is imposed on volunteer developers,
Windows risks losing developers altogether.
We support the purpose of SAC.
However, we request a pathway for open-source participation in the Windows trust model.
.NET Dev Policy Proposals
| Proposal | Goal |
|---|---|
| Provide free or low-cost signing certificates for OSS developers | Protect non-commercial contributors |
| Create a “Verified Open Source” exception group in SAC | Allow trusted OSS tools to run safely |
| Integrate SAC trust with GitHub Verified Publishers | Automate verification + expand trust |
| Establish OSS developer registration & support programs | Combine trust, responsibility, and ecosystem protection |
Security must be strengthened, but the cost must be shared fairly.
This is how Windows and open source grow together.
The .NET Dev community respectfully asks Microsoft to view this as a collaborative opportunity for improvement. We do not wish to leave Windows — we want to build its future together.
Endorsement
This statement is declared as the independent stance of an open developer community, not based on the interests of any specific company.