Hello @Han ,
GitHub Releases is free for hosting your installer.
As an alternative, cloud storage services like Azure Blob Storage or Amazon S3 are also low-cost options for hosting files.
For signing, there are two main types:
- Organization Validated (OV) Certificate: This verifies your company is a real business. While it helps, Windows may still show a warning for a short time until your application builds a reputation.
- Extended Validation (EV) Certificate: This involves a more detailed background check on your company. Its main advantage is that it gives your application immediate trust, preventing security warnings from the start.
I hope this helps.