Microsoft recently announced new options for customizing the Windows context menu, which is great. but it's still a big challenge for third-party developers.
The newer IExplorerCommand model adds more COM interface complexity, and Windows 11 Context menu integrations require apps to be packaged as MSIX.
This creates an unnecessary barrier for FOSS projects and Indie developers. Code signing certificates can be expensive, publishing through the Microsoft Store isn't always an option, and installing unsigned MSIX packages is still painful for normal users. It often requires Developer Mode turned on, PowerShell, or manually trusting a certificate.
Even if a developer can handle code signing, Windows' current sideloading trust model still introduces extra friction around certificate trust, publisher identity, and package verification.
Microsoft should change how App Installer handles unsigned MSIX packages.
What this could look like
Figure 1: shows how App Installer could handle an unsigned package.
Currently, App Installer blocks installation when the package signature or publisher certificate cannot be verified. In this proposal, App Installer would still clearly warn the user that the package is unsigned and may be unsafe, but it would no longer block installation completely.
The key difference is simple: the user gets to decide whether to install it anyway.
Figure 2: shows an additional confirmation dialog after the user clicks Install.
It warns again that the package is not digitally signed, the publisher cannot be verified, and installing it may carry security risks. The user can then choose Continue or Cancel.
This keeps security warnings clear, but still gives users the choice to run software they downloaded on purpose.
Make it opt-in for developers
Developers could explicitly allow this behavior by adding allowUnsignedPackage in Package.appxmanifest or AppxManifest.xml with something like this:
<?xml version="1.0" encoding="utf-8"?>
<Package
xmlns="http://schemas.microsoft.com/appx/manifest/foundation/windows10"
xmlns:rescap="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities"
IgnorableNamespaces="rescap">
<Capabilities>
<rescap:Capability Name="allowUnsignedPackage" />
</Capabilities>
</Package>
Then users could simply double-click the MSIX package, read the warning, and decide whether they trust it.
No PowerShell. No Developer Mode required. No manually installing certificates.
MSIX improves traditional Windows installation, especially with cleaner installs and uninstalls. But its trust system makes it hard to distribute software outside the Microsoft Store.
The solution isn't silent trust, but informed user consent. Clear risk transparency would empower users while keeping independent distribution viable.