.NET Security Zones
From: Christopher Pragash (chrispragash_at_hotmail.com)
Date: 07/24/03
- Next message: Shel Blauman [MSFT]: "Re: Custom permissions not throwing exceptions"
- Previous message: Max Vaysburd [MS]: "Re: Interop between CryptAPI and RSACryptoServiceProvider"
- Next in thread: Ivan Medvedev [MS]: "Re: .NET Security Zones"
- Reply: Ivan Medvedev [MS]: "Re: .NET Security Zones"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 24 Jul 2003 12:34:09 -0400
Hello all,
I have used the configuration utility to create and modify Code groups under
different security zones. A question that arised in my mind was how does the
.NET identify which URL belongs to which zone (Intranet, Internet etc...) My
guess is it uses the IE settings to determine the zones, but then those
could be faked (eg. changing dns entries...etc) Looks to me like .NET code
access secuirty depends too heavily on the zone factor. Are my assumptions
correct...or am I totally missing something here???
Could anybody please help me in understanding this?
Thanks,
Chris
- Next message: Shel Blauman [MSFT]: "Re: Custom permissions not throwing exceptions"
- Previous message: Max Vaysburd [MS]: "Re: Interop between CryptAPI and RSACryptoServiceProvider"
- Next in thread: Ivan Medvedev [MS]: "Re: .NET Security Zones"
- Reply: Ivan Medvedev [MS]: "Re: .NET Security Zones"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|