Tech Off Thread

5 posts

Forum Read Only

This forum has been made read only by the site admins. No new threads or comments can be added.

ClickOnce is (officially) in Express!

Back to Forum: Tech Off
  • User profile image
    Sampy

    ClickOnce support is in Visual Studio 2005 Express edition!

    Man it's been hard waiting to tell you guys. We didn't water it down either, you get the everything the higher SKUs get*!

    * I reserve the right to be proven wrong.

  • User profile image
    Rossj

    Sampy I hope you'll excuse my ignorance of Click Once (I have indeed been living under a rock for a while) but it looks like JNLP. Is this, essentially, the functionality it provides?

    I found a site talking about CO and it didn't appear to have made a huge impact on this guy (although it is a year old) - http://www.microsoftmonitor.com/archives/001774.html

    I also found this link http://msdn.microsoft.com/msdnmag/issues/04/05/clickonce/default.aspx but one line in particular worried me a little

    microsoft.com wrote:

    When the user clicks the link on a Web page or in an e-mail, the application files are downloaded to the user's machine and executed.


    Is this Marketing speak (i.e. missing out key technical requirements - like signing) or is it how it will work?

    Thanks for being understanding ..


    EDIT: Woah read a bit further and it said this

    The application then executes with the CAS security context determined by the location of the deployment server, such as the Internet or Local Intranet zone.

    I am a little less worried now.

  • User profile image
    Sampy

    You don't run based on zone. The application comes with a manifest with the list of the permissions the app wants. That is then compared to the zone that the app comes from to see if the app is allowed to 1) just run, 2) prompt the user, or 3) blocked.

    In this tech preview (and from now on) you can sign your app's manifests with an Authenticode cert to move your app from blocked to prompt or from prompt to just run.

    For those of you worried about security, an app that comes from the internet and asks for more permissions than the internet zone allows is blocked completely unless it is signed by a valid Authenticode cert (which costs about $200 a year). The default is secure.

  • User profile image
    Rossj

    Thanks for the clarification.

  • User profile image
    fdezjose

    Great! That's cool. I'll try it tomorrow.

Conversation locked

This conversation has been locked by the site admins. No new comments can be made.