Post

Notepad++'s code signing cert expired, couldn't get a new one under the "Notepad++" name, so instead of getting one under their name (what the WinSCP developer does), they instead created their own root CA, issued a code signing cert, and want you to trust it notepad-plus-plus.org/news/v883-se...

notepad-plus-plus.orgNotepad++ v8.8.3 - Self-signed Certificate: Certified by Code, Not Corporations | Notepad++

10/7/25, 12:43 pm1 repost2 likes

Anthony J. Fontanez

@ajf8729.com

10 July 2025

This is actually hilarious and no, you shouldn't blindly trust some root CA like this. This defeats the purpose of how PKI works. Public CAs are heavily regulated in terms of auditing and security.

Anthony J. Fontanez

@ajf8729.com

10 July 2025

If you were to trust their root CA as instructed, anything it issues would be inherently trusted by your device.