Newbie question: some vendors propose solution like generating dynamic certificates to allow user who haven t classic certificate to sign documents. But why not just generate private/public keys alone instead of bothering with certificate format ?
For security reasons, it is desirable to check the integrity of code before execution, avoiding tampered software by an attacker. So, my question is How to sign executable code and run only trusted ...