Contents tagged with DeadBolt.NET

  • DeadBolt.NET Suspended

    Tim Heuer pointed me to an article that represents a fundamental flaw in our implementation of DeadBolt.NET. It is written by the great Don Box and Chris Sells, and describes what is going on under the covers of SN.EXE. I did a lot of research on the subject of Strong Name Signing before helping to write this add-in, and never came across this article. Hopefully, by pointing it out, more people will understand how it works, as I obviously didn't. Basically, our implementation is flawed because we're pulling the PublicKeyToken from the combined public/private key, and not just the public key (apparently, SN.EXE dioesn't pay attention to the difference). The assembly is being signed properly, we're just extracting the wrong information for the Public Key part.