Why can't strongly named assemblies use assemblies that aren't signed?

后端 未结 3 1471
春和景丽
春和景丽 2021-01-19 02:04

To sign an assembly A you have to make sure all assemblies B, C, D that are used by A are signed, and then all assemblies that are used by B, C, D, and so on. I don\'t under

3条回答
  •  醉话见心
    2021-01-19 02:35

    It's because the a strongly named assembly implies that it can be trusted, and levels of granted security are based on the idea that the code is from a legitimate source. This means that all other items that it interacts with must also be trusted, because it executes under the same security context.

    If strongly named objects didn't work this way, a method of attack would be to replace the items which aren't signed with rogue code the attacker wants to execute. The rogue code would execute under the trusted security context of the signed item.

提交回复
热议问题