Get Luft for your desktop

Luft is not signed with a code-signing certificate. That is not an oversight: the certificate that removes the warning from day one is only sold to registered companies, and Luft is made by one person. The installer works fine; it just goes through two warnings.

1. When you download itChrome or Edge may say the file "is not commonly downloaded and may be dangerous". Choose Keep.
2. When you run itWindows shows "Windows protected your PC" and an unknown publisher. Click More info, then Run anyway.
3. And possibly your antivirusAn engine or two may flag it, almost always with a generic label ending in "!ml" — something like Trojan:Win32/Wacatac.B!ml. That "!ml" means it is a machine-learning guess, not a signature for anything known, and it is the most common detection against new, unsigned installers. Windows Defender on a real machine does not flag it. The link below goes to the full analysis so you can judge for yourself.

So how do I know I can trust it?

Do not take my word for it: check the file. The installer SHA-256 is below. If the one you downloaded gives the same value, it is exactly what is published here and nothing altered it on the way.

See the VirusTotal analysis