Comments (2)
Looking for feedback here:
I don't want to limit the communities ability to create privates and use them. Does anyone know the best practices for .NET signing binaries in the public? From what I can tell people include the Key.snk
in the project and you can sign the binaries on your own if building privates. However this doesn't offer any protections of authenticity given the key is public if we use this same key for NuGet. For official releases to NuGet I would sign these with a private key known only to me. (Uh... Hit by a bus scenario anyone?)
The issue I see here is mostly that these two keys will never be the same and thus people who are making privates will be constantly switching between strong names of different keys. Are there any issues here other than requiring rebuild? Maybe that isn't even a problem since if you are using privates you are rebuilding anyways. Ideas?
from docker.dotnet.
@jterry75 I would suggest you to ping @sergeybykov
He is the head of Orleans project and we sign Orleans public bits on every release. I know it is a costly process but he may be able to guide you with the internal MSFT process to get there.
As for public custom builds, anyone can tap in the build process using their preferable tool and sign the dll.
from docker.dotnet.
Related Issues (20)
- MonitorEventsAsync syntax for --since param HOT 2
- Implement the Swarm Secrets 'Update a Secret'
- How to start an interactive session with StartContainerExecAsync? HOT 1
- Any plan for System.Text.Json? HOT 5
- /bin/bash: sudo test -f /repositories/gubbins/file.txt && echo true: No such file or directory
- [Question] equivalent api for docker service ps --no-trunc [swarm service name] HOT 2
- Not able to bind port to HostIp HOT 1
- What units are HealthConfig.StartPeriod in? HOT 1
- How to copy output from a container (E.g. output of an ML model) to the host machine
- Is there a way to manage stacks?
- README.md needs update because client.System.MonitorEventsAsync method is returning void not Stream.
- MonitorEventsAsync Progress Action is one event behind HOT 6
- Container does not receive stdin input
- .net8 build an image problem HOT 1
- BuildImageFromDockerFileAsync does not tag images correctly
- Container filters can't be negated HOT 6
- ServiceCreationMode is missing replicated-job and global-job
- Swarm.CreateServiceAsync doesn't return "Version" which means unable to do an UpdateServiceAsync afterwards
- .Net 8 upgrade: error occurred during the pre-login handshake
- Is this project alive? HOT 4
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from docker.dotnet.