Posted By: The Channel 9 Team | Jul 29th, 2004 @ 11:10 AM | 43,855 Views | 23 Comments
ClickOnce is a new deployment technology in the next version of Visual Studio (Visual Studio 2005, aka "Whidbey"). 

ClickOnce lets you deliver .NET apps with just a single click off of a Web page. Here Jamie Cool demonstrates the developer experience of ClickOnce and how you'll be able to use it in your own applications.
Media Downloads:
Rating:
0
0
Tom Servo
Tom Servo
W-hat?
I can tell you from experience that home users will likely hit OK and ignore any warnings if the application title is pleasing enough, for instance above mentioned exampole "Paris Hilton pictures".

Another question anyway:

Will ClickOnce show warnings if the publisher changed during an update? Because it wouldn't be exactly the bomb when some hacker uploads a different package and ClickOnce assumes it automatically safe because the update comes from the same place as the initial install and all previous updates.
farquhar
farquhar
useless drivel
Thanks Sampy. I really Know MS is taking security seriously. I also Know people deploy code based on your samples. They hop over the wizard they see an MS demo hop over.

My plea is to deal with the security where ever it is encountered in demos. In time it will become second nature, requiring no comment or explanation.

In the mean time I'll go back to educating my devteams and consulting groups on why not to use SQL sa , why not to store secrets in plaintext with everyone read ACLs , and all the other things they learned in the bad old days.

http://ftp.gnu.org/savannah/files/faifes/c1291.html
ZippyV
ZippyV
Fired Up
Why is ClickOnce not available in the Express products?
scobleizer
scobleizer
I'm the video guy
Want the honest answer? We'd like to sell you a copy of Visual Studio.
Sampy
Sampy
This will be the sixth time we have destroyed it and we have become exceedingly efficient at it
ClickOnce in express is being considered for Beta 2.

However, you can play with ClickOnce with your express SKU today! See my blog post on the topic:

http://blogs.msdn.com/misampso/archive/2004/07/26/197577.aspx
Since this thread has been brought back up already...

ClickOnce sounds suspiciously close in name to InstallShield's One-Click.  It's been bugging me enough to mention it. Smiley
Sampy
Sampy
This will be the sixth time we have destroyed it and we have become exceedingly efficient at it
farquhar wrote:
Thanks Sampy. I really Know MS is taking security seriously. I also Know people deploy code based on your samples. They hop over the wizard they see an MS demo hop over.


All ClickOnce manifests must be signed otherwise they are invalid. VS does not let you create unsigned manifests (we'll make a new key for you if you try  and publish without a key selected) and the runtime will not execute them. If a ClickOnce application activated from the internet and does not run inside the Internet zone, it will not activate unless the signature is trusted. Try it in Beta 1, the user isn't even allowed to override this choice.

The ClickOnce defaults will be secure and prevent unathorized execution. We're taking a very XP SP2 approach to things in this regard. "We" being not just the ClickOnce team but all of the Visual Studio and .Net frameworks team and all of Microsoft.
ZippyV
ZippyV
Fired Up
Sampy wrote:
ClickOnce in express is being considered for Beta 2.

In your face Scoble!

BTW, is it possible to pack an application and the setup.exe in a .cab file? My ISP doesn't allow exe files on the webspace or files bigger than 2MB.
Tom Servo
Tom Servo
W-hat?
Dumb question, are the premises (code and whatnot) for a ClickOnce install packed with the file that gets deployed on a webserver? Means, can anyone install a ClickOnce package without installing something else in advance?
Microsoft Communities