Each time the Opera Browser receives an update (which is quite frequent), GlassWire Firewall re-prompts for access. I guess this is because it installs into a version specific folder e.g.
I use that browser also and do the same. Since the hash changes, we have to do a new “ask to connect”. Otherwise someone could just call their malware opera.exe and it would bypass our firewall.
If you have some other ideas on how to solve this we’re glad to hear. For example maybe we should offer a mode where if an app has no cert signed then it receives an “ask to connect” prompt, but others do not?
I guess you might not necessarily want access for all executables which have been signed by the cert. So for maximum security you could check both a pattern match on the path and the cert.
If you’re going to skip the firewall prompt for programs that update with a different file path then please log an alert because users will forget that they have activated this option.