Why can't strongly named assemblies use assemblies that aren't signed?
问题 To sign an assembly A you have to make sure all assemblies B, C, D that are used by A are signed, and then all assemblies that are used by B, C, D, and so on. I don't understand what's the security benefit of this. I think it's supposed to prevent tampering, but assembly A is allowed to open any file, and these can be tampered. The same goes for an external webserver. Also, it's too easy to sign an assembly with a .snk file that you make public, sidestepping the requirement. 回答1: The point is