April 2002
Intermediate to advanced
816 pages
20h 56m
English
In many cases, mobile code should be granted fewer permissions than full trust. However, this decision limits what libraries mobile code can call. The System.Security.AllowPartiallyTrustedCallersAttribute, nicknamed APTCA, is the cause of these restrictions. If code has been granted less than full trust, it cannot call into an assembly signed with a strong name unless that assembly is also marked with APTCA.
APTCA was created so that malicious semi-trusted code has fewer vectors of attack on a client. A given client will probably have many assemblies installed in the Global Assembly Cache, and each assembly could expose a vulnerability. Because the default behavior of strong named assemblies is to ...
Read now
Unlock full access