Apache Friends Support Forum

Why is the control pannel file not signed? This is the one executable we mindlessly grant administrative access to each time we want to manage the servers.

Directly quoting the [wikipedia page for code signing](https://en.wikipedia.org/wiki/Code_signing#Providing_security):

Code signing is used on Windows and Mac OS X to authenticate software on first run, ensuring that the software has not been maliciously tampered with by a third-party distributor or download site.

So, why not sign it?

Certificates for code signing cost a lot of money yearly.
And how much did you pay for xampp?

Finally, the control panel is only a "nice to have" feature. You can start all Xampp services without any hassle in a terminal, which (for example) is the preferred method in linux environments.

The power of Xampp is NOT the control panel, it is the distribution of the tools instead. So if you feel unlucky with the control panel: dont use it. Nothing easier than that.