Skip to content

Request: Strong-name + Authenticode + Author-signed NuGet package #456

@exp-ouroborous

Description

@exp-ouroborous

I’d like to request official signing support for distributed binaries and packages. so that signed assemblies and verified package provenance before dependencies can be approved. This can help with adoption in more regulated enterprise cases.

Strong-name signing
Ensure all published assemblies are strong-named
Publish the public key so consumers can reference it safely

Author-signed NuGet packages
Sign packages with a trusted certificate (NuGet author signing)
This allows consumers to validate publisher identity instead of relying solely on repository signing

Authenticode signing
Sign DLLs using an Authenticode code-signing certificate
This enables verification via Windows trust chain and enterprise allowlists

Metadata

Metadata

Assignees

No one assigned

    Labels

    needs-triageIndicates that an issue needs to be categorized.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions