This is no different form any certification authority.
The WinQual requirements state you must be a company. So, first you must form a company, handing over all sorts of details to your government so they can determine that, yes, you really are you.
Next, you need a Class 2 verified certificate from Verisign, so you're essentially handing copies of your passport and driving license to them, plus the company's registration documents.
As Verisign are administering this service, I'd be very surprised if they hadn't agreements with numerous world governments which they can use to verify the authenticity of these documents; and validating company registration documents isn't difficult
So, you're going to give Verisign a picture of your passport and driving license and registration documents for this company, and then you're going to give Microsoft the same.
And then you're going to sign contracts saying that you're not going to do nefarious things, probably with large financial penalties, then do nefarious things?
Re: Code signing for anyone - it just does not make sense
The WinQual requirements state you must be a company. So, first you must form a company, handing over all sorts of details to your government so they can determine that, yes, you really are you.
Next, you need a Class 2 verified certificate from Verisign, so you're essentially handing copies of your passport and driving license to them, plus the company's registration documents.
As Verisign are administering this service, I'd be very surprised if they hadn't agreements with numerous world governments which they can use to verify the authenticity of these documents; and validating company registration documents isn't difficult
So, you're going to give Verisign a picture of your passport and driving license and registration documents for this company, and then you're going to give Microsoft the same.
And then you're going to sign contracts saying that you're not going to do nefarious things, probably with large financial penalties, then do nefarious things?
Nothing's perfect, but this goes a long way.