Jay,

In general, you sign assemblies because:

a) you want to to store them in the GAC

=> we don't see an immediate need to store our assemblies in the GAC

b) to allow users to verify the publisher

=> our signing key would need to be public to allow users to build NAnt from
source; hence anyone could have signed the NAnt assemblies

I haven't checked if all third-party assemblies that we use are signed. If
not, then signing our assemblies is a no-go anyway since all the assemblies
referenced by a strongly named assembly must also be strongly named.

Gert

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jay Walker
Sent: maandag 9 april 2007 18:07
To: nant-users@lists.sourceforge.net
Subject: [NAnt-users] Why aren't Nant / NantContrib Assemblies signed


In our development organization we sign all our internally developed
assemblies. A .net framework requirement of signed assemblies is that all
references must also be signed. The Nant / NantContrib binaries are not
signed which causes us a point of pain in that we now have to maintain the
nant source, compile it, and sign it with a key in order to use the
assemblies from our signed assemblies. It would be very helpful if the
published binaries were signed.

Is there a design justification for not signing the Nant framework / Contrib
assemblies? Are there plans to sign the assemblies in the future?

Thanks,

Jay
--
View this message in context:
http://www.nabble.com/Why-aren%27t-Nant---NantContrib-Assemblies-signed-tf35
48011.html#a9904588
Sent from the NAnt - Users mailing list archive at Nabble.com.


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
NAnt-users mailing list
NAnt-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nant-users


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
NAnt-users mailing list
NAnt-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nant-users

Reply via email to