Guide

Retiring the Traditional Windows Installer

Starting after v(Dusky Grouse), Project Kestrel will no longer publish a traditional Windows .exe installer. We encourage everyone on Windows to get Project Kestrel through the Microsoft Store instead.

Why

  1. It's unsigned, and that's a security risk. The traditional installer isn't code-signed. An unsigned .exe is exactly the kind of file attackers impersonate — there's no way for Windows, or you, to cryptographically verify it actually came from us. Getting a code-signing certificate costs hundreds of dollars a year, which isn't something this project can sustain.
  2. It's extra overhead we can't keep testing properly. Maintaining a second installer means relying on third-party installer tooling and testing a whole separate install/uninstall/upgrade path — on top of the Microsoft Store package, which already exists and already works.
  3. The Microsoft Store handles updates automatically. No manually re-downloading and reinstalling every release.
  4. Windows users who want to build from source still can. Project Kestrel is open source (AGPLv3) — running from source remains available to anyone who prefers it, same as on Linux.

Taken together, the traditional installer wasn't pulling its weight against the risk and effort of keeping it around.

What this means for you

If you're on Windows, please get Project Kestrel from the Microsoft Store. v(Dusky Grouse) is the last release the traditional installer will be published for.

If you still want to download the traditional installer for v(Dusky Grouse), click here.

If you disagree with this change, please contact me — I'd like to hear from you.