This way you can use ClickOnce to explicitly control the grant set of the applicaiton, and transparency to ensure that you're not accidentally causing an elevation outside of that call stack, even if some of your application is installed in the GAC and fully trusted.
This post digest is 7% of the original post size. Uncompress
Read Transparency as Least Privilege (Links)
Read Avoiding Assembly Level Declarative Security (Links)
Read CLR Inside Out: Digging into IDisposable (Links)
Read Silverlight Security Cheat Sheet (Links)
We can summarize the CoreCLR security inheritance rules for applications into three quick rules: Types may only derive from base types that are transparent.
This post digest is 4% of the original post size. Uncompress
Read Silverlight Security III: Inheritance (Links)
Read Silverlight Security II: What Makes a Method Critical (Links)
Which means that the essence of the CoreCLR security model is that Silverlight applications may not contain unverifiable code and may only call transparent or safe critical APIs exposed from the platform. Let's dig a little deeper into this.
This post digest is 3% of the original post size. Uncompress
Read The Silverlight Security Model (Links)
Read Bypassing the Authenticode Signature Check on Startup (Links)
Read Loading an Assembly as a Byte Array (Links)
The.NET Framework SDK ships with a MMC Snap-In which enables you to, among other things, avoid using caspol to modify your local security policy.
This post digest is 5% of the original post size. Uncompress
Read Using the MMC Snap-In to Configure 64 Bit CAS Policy (Links)
Enter your search term in the field below.
If you enjoy .Net Security Blog you may also like to read:
The following one-click bookmarking links are made available for your convenience.
Backflip
BlinkBits
Blinklist
blogmarks
Buddymarks
CiteUlike
Connotea
del.icio.us
de.lirio.us
digg
FeedMarker
Feed Me Links!
Furl
Give a Link
Gravee
igooi
kinja
Lilisto
Linkagogo
Linkroll
looklater
Magnolia
maple
netvouz
Newsvine
Open Tag Directory
Raw Sugar
Shadows
Simpy
Spurl
Squidoo
tagtooga
Technorati
Wink
wists
Yahoo My Web
The following one-click subscription links are made available for your convenience.
reddit
