Signing of Assemblies

Question

1.In RealTime Projects, If there are hundreds of assemblies then whose duty to sign the those all assemblies? 2.In Companies who will generate the private-public key file either developer or manager or someone else? Thnaks In Advance

Nitin Sontakke · Answer

1/ I have never worked in any company so far where assemblies are actually signed. This is particularly a requirement where you are assemblies are distributed for public consumption and as such must be trusted. I am pretty sure if in any company this has to be done for 100s or 1000s of assemblies there must sure be a tool to do it. 2/ People don't create public / private keys by themselves. Particularly not the ones which I have mentioned in point 1 above. These keys are just like secure socket layer certificates which are used for the web-sites. These needs to be bought from what is called as a certificate authority. These are the companies which issue these certificates and are trusted globally. It is a complex process. VeriSign is one such company. As I can notice that CSharpCorner has taken certificate from the Let's Encrypt. You can view the certificate yourself. See https://letsencrypt.org/ and the following image. Hope that sort of clarifies.

Signing of Assemblies

Answers (1)