Notarization for stock macOS build

[mahalis]

Notarization for stock macOS build

[slime73]

Since people can run arbitrary code with LÖVE, from what I understand notarizing it means we're on the hook if someone makes a .love that's malware and Apple flags the app because of it (#1554 (comment)) – so every copy of love would stop working simultaneously if that happens, and we couldn't guarantee that it won't happen.

Aside from that and the developer fee, we'd also probably need to distribute a second unsigned app people can use for distributing their own games as well.

Overall Apple has put tools like LÖVE between a rock and a hard place with these changes.

[mahalis]

Ah dang, I guess that makes sense. At least for the second point, it’s possible to remove a signature (it’s all just in a _CodeSignature folder inside the bundle in any case) and re-sign it… but that doesn’t help if someone does distribute something malicious.

I donated a bit anyway, just out of appreciation for y’all making such a great engine. I can live with giving people the elaborate run instructions. Thanks for the quick response.

[slime73]

Thank you! I'm kind of hoping for a secret third option to appear that works well for us because I'm not happy with either possibility right now...