I've been doing some testing to find out how easy it is to remove strong name keys from our assemblies (pure research only - we want to understand vulnerabilities in our own application). I've managed to remove the strong name key in our assembly and update things that reference it to remove the key from the reference, but it appears that custom attributes retain the original assembly. The custom attribute uses Type in it's constructor, like:
[MyCustomAttribute(typeof(SomeTypeInAssemblyIWantToStripTheKeyOffOf))] public void Foo(); It appears that the "typeof(SomeType...)" retains it's reference to the assembly's strong name key from when it was originally compiled. Is the correct solution to just hunt this attribute down, remove it, and add it back without the public key, or is there a step I am missing when removing the public key? -- -- mono-cecil
