When I publish a program on the internet for the first time, any internet browser will not let anyone download and run it. Instead, the browser will complain that the program is insecure and you have to go away. So you have to be persistent, try options, and finally, you will succeed.
After some time, the program becomes safe.
There are no more questions asked, just downloading and executing.
How does it go?
- First, I had to wait for a number of downloads to be performed, despite the warning. About 1000.
- In the search console, I got a warning, that I have a link to a harmful download on my website. That was feeling kind of rude or scary for the first time.
- Do not change anything. Google is just trying to scare you. Go ahead and directly ask for a review.
- The response comes:
- Anyone can download and execute my program without the Smart Screen warning, finally
It is crucial to have a code signing certificate. Once earned, trust is valid for everything I sign, regardless of the URL.
Prolonging the certificate does not trigger the warning, but buying a new certificate from another source does. So we have to wait again.
I would not try to go through it without checking the file by virustotal.com.
And now, I realy have to pay attention, not to catch anything. I can imagine that the trust will be tough to regain once lost.