Infralution Support

[lonestar]

Hello,

Is there a digitally signed version of the Virtual Tree (v3.7.2.0) assemblies?

This is a requirement in order to obtain the Windows 7 compatibility logo from Microsoft.

Thank you!

[Infralution]

Our assemblies are currently strong name signed using our private key which effectively prevents tampering. I'm not sure that signing with authenticode really provides any additional benefit for non-executables. We will do some more research however.
_________________
Infralution Support

[lonestar]

We would appreciate it very much if the possibility is considered

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=27028822-b172-4cec-91a3-26b610a4da79

Thank you.

[Infralution]

If we did start authenticode signing of individual assemblies it would be from the next version (3.15.2) onward. Are you stuck back on Version 3.7.2 for a reason?
_________________
Infralution Support

[lonestar]

It sounds great if next version (3.15.2) could be digitally signed.

We haven't had a strong reason to update since we have put a lot of testing hours using Version 3.7.2; but we will update if a signed version becomes available.

[Infralution]

Some research reveals that their can be some serious performance consequences to authenticode signing .NET assemblies. See the following links:

http://www.chilkatsoft.com/p/p_192.asp

http://blogs.msdn.com/b/dougste/archive/2008/02/29/should-i-authenticode-sign-my-net-assembly.aspx

http://brianseekford.com/index.php/2010/04/09/why-does-my-net-application-with-authenticode-signed-dlls-take-so-long-to-load/

Testing on our own systems (with internet connection) reveals that authenticode signed assemblies slow the loading of the sample applications by about 4 seconds.

It would seem unwise for us to force this sort of performance penalty on all of our customers. We are however happy to provide you with a signed set of assemblies for your requirements.

I have uploaded a signed set of the VirtualTree 3.7.2 assemblies to our website. You can download it from:

www.infralution.com/downloads/VirtualTree3-7-2Signed.zip
_________________
Infralution Support

[lonestar]

Yes, you are absolutely right. The problem is specially noticiable when the user has no Intenet access and he/she tries to load the application for the first time. Some component vendors are providing both versions, signed and unsigned assemblies.

We do appreciate it so much,

Thank you!