Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable assembly signing (#10) #11

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Enable assembly signing (#10) #11

wants to merge 1 commit into from

Conversation

22222
Copy link
Owner

@22222 22222 commented Sep 1, 2019

Enables assembly signing in the CsvTextFieldParser project.

One question is whether the private key should be kept a secret or if it should be checked in. I decided to check in the keyfile based on Microsoft's advice in Strong-Named Assemblies:

If you are an open-source developer and you want the identity benefits of a
strong-named assembly, consider checking in the private key associated with
an assembly into your source control system.

Which also says:

Do not rely on strong names for security. They provide a unique identity only.

More documentation about strong naming:

The keyfile is intentionally included based on Microsoft's advice:

> If you are an open-source developer and you want the identity benefits of a
> strong-named assembly, consider checking in the private key associated with
> an assembly into your source control system.
@22222 22222 mentioned this pull request Sep 1, 2019
@22222 22222 force-pushed the master branch 3 times, most recently from 36c2858 to 53caad5 Compare December 17, 2021 21:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant