Sign the windows EXE

[Gordonby]

Users that download the windows EXE will be prompted (by browser and OS) that it is not safe because the EXE isn't signed.

There is a GitHub Action for signing: https://github.com/marketplace/actions/code-sign-a-file-with-pfx-certificate

This would provide additional confidence for windows users of ksync.

[grampelberg]

That's awesome! Up for a PR?

[Gordonby]

If you've got a certificate in the secrets store, sure.

Otherwise, not sure how to get free certificates for code signing. LetsEncrypt won't cut the mustard.

[grampelberg]

What does it require?

[timfallmk]

Leaving this here from quick googling https://mkaz.blog/code/code-signing-a-windows-application/

[timfallmk]

From some research it appears obtaining a valid code signing certificate for Windows costs between $150-$500/year. There don't seem to be an exceptions for FOSS. Looks like this is something we can't do.

I'll leave this open in case anyone wants to sponsor the project or donate a cert in the future.

Maybe we should add a warning to the documentation @grampelberg ?