Code signing policy

DedCut is free and open-source software (GPL-3.0) made by ByKemi. This page explains how its files are signed, by whom, and what DedCut sends over the internet.

Windows code signing

Free code signing provided by SignPath.io, certificate by SignPath Foundation.

DedCut has applied for it: until the application is accepted, the Windows installer is not yet signed this way (Windows may then show “Windows protected your PC”).

What is signed

The Windows installer DedCut-Installation.exe, built by GitHub Actions from the public source code (github.com/Bykemi/dedcut-source, file .github/workflows/windows.yml).

Only files built from DedCut’s own source code are signed. Every signing request is manually approved by ByKemi.

Program metadata (product name “DedCut”, version number) is the same for every build of a given version.

Updates

In addition to Windows code signing, every update is signed with ByKemi’s key, which never leaves ByKemi’s computer: DedCut rejects any update that is not signed with this key. The SHA-256 hash of each installer is published in the release notes.

Team roles

Committer and reviewer: ByKemi (github.com/Bykemi).

Approver: ByKemi.

Multi-factor authentication is required for the team’s GitHub and SignPath accounts.

Privacy policy

This program will not transfer any information to other networked systems unless specifically requested by the user or the person installing or operating it, with these exceptions:

• at startup, DedCut asks GitHub for the latest version number (no personal data is sent);
• downloads requested by the user (AI models, music);
• live streaming and the accounts the user connected (chat, alerts), to the platforms the user chose;
• online AI services, only if the user chooses them and enters their own key;
• bug reports, sent by the user from their own e-mail.

Details: privacy on dedcut.com.

Report a problem

Write to bugs@dedcut.com or open an issue on github.com/Bykemi/dedcut-source.