Windows already blocks installation and execution of drivers that aren't signed ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		Dalewyn on July 11, 2023 \| parent \| context \| favorite \| on: Letting users block injected third-party DLLs in F... Windows already blocks installation and execution of drivers that aren't signed by Microsoft under their WHQL[1] program. You can turn the blocking off, but that's a deliberate choice made as a sysadmin or power user. Drivers from Intel/Nvidia/AMD are signed by Microsoft, WHQL certified, and are not part of Windows, so as far as Mozilla is concerned they are third-party drivers. [1]: https://learn.microsoft.com/en-us/windows-hardware/drivers/i...

delfinom on July 11, 2023 [–]

WHQL isn't required btw, but Microsoft does require drivers to have a valid EV code signing cert to be loaded by the OS.

WHQL is only required for distribution in Windows Update.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact