[Bug]: Windows 11 Smart App control

[RalfKerkhoff]

Operating system

Windows 11

Publii version

0.4.74

Post editor

None

Bug description

Hi,
I just installed 0.4.74 and noticed that Publii exe is blocked by Windows Smart App control because of "an unknown publisher".
This does not happen with 0.4.73.

Due to the blocking it is not possible to launch the program.

Cheers
Ralf

Steps to reproduce

No response

Relevant log output

[bobmitro]

Hey,

Publii is signed with a valid EV Code Signing certificate, which is still fully valid.
No other users have reported this issue with the current release so far.

Windows Smart App Control also depends on online reputation and certificate validation.
If the system cannot reach Microsoft validation services (for example due to firewall, VPN, proxy, or DNS filtering), a correctly signed application may still be blocked as “unknown”.

This is likely an environment-specific issue rather than a problem with Publii itself.

[RalfKerkhoff]

If you are tight, version 0.4.73 should also be blocked. But that is not the case.
Version 0.4.73 works without problems.

It only happens to the '74 version.

[bobmitro]

Smart App Control evaluates each build independently, based on its file hash and reputation, not only on the application name or publisher.

Version 0.4.73 and 0.4.74 are different binaries, so they have different hashes and different reputation states.
A newer build can be temporarily blocked if reputation or online validation cannot be completed, while an older build continues to run without issues.

This behavior is expected with SAC and does not indicate a problem with the code signing or with Publii itself.

At the moment, Publii for Windows is downloaded multiple times per day, and so far you are the only user reporting this problem. We will continue to monitor the situation and see if other users report similar issues.

[RalfKerkhoff]

I have also reported the problem to Microsoft via the SAC Feedback form.
Maybe it helps.

As '73 is working like a charme it is not a big deal at the moment.