Microsoft kills off Windows app installation from the web, again

Microsoft disabled the ms-appinstaller URI scheme after threat actors abused the App Installer web-based install mechanism to distribute malware and bypass SmartScreen and browser warnings. The company plans to revoke abused code-signing certificates, recommends updating vulnerable App Installer versions and applying Group Policy controls, and has re-enabled the protocol for select enterprise customers with explicit policy settings.