c# - DLL 由未知公司签署？

Question

我读过一些关于强名称 dll 的内容，但我有点困惑..
通过使用强名称汇编，我确信汇编中的代码是原始的，没有被病毒或类似的东西入侵。
但我想知道哪家公司开发了强名称程序集，并确保该程序集确实由那家公司开发!

例如，我从未知站点下载了一个强名称 dll，dll 是由 Microsoft 签名的，但这是真的吗？或者有人像微软一样开发了那个 dll 并对其进行了签名？

Answer 1

我认为您将强命名与证书签名混淆了。来自 Eric Lippert's post (你应该阅读)

The purpose of a strong name is solely to ensure that when you load an assembly by name, you are loading exactly the assembly you think you are loading.

...

The purpose of a digital signature from a publisher certificate is to establish a verifiable chain of identity and trust. The chain of trust goes from a hunk of code of unknown or uncertain origin up to a "trusted root" -- an entity which you have configured your operating system to trust.