Code Signing Certificate purchase and authorization
As a freelance developer without an organization (yet), who needs a Code Signing Certificate so I can distribute software, I had a few problems...
1) It was not made clear t what data should be supplied to validate my identity until after I had paid for the certificate. This should be clearly defined before you pay. My money was taken before I had been "validated".
2) I had to supply some very sensitive data to get the certificate. Bank statement, address, passport details, work permit, health insurance... This data was sent by email. THIS IS NOT VERY SECURE, and I was very unhappy about it. My identity COULD EASILY BE STOLEN. Who has access to this data? All the support team? I do hope that Sectigo ensures this data is secure!!!!
It would be nice to get some feedback to this review which makes me feel a bit happier about the security of my data.