What recommendations can you give for a system which must do the following:
Load Plugins (and eventually execute them) but have 2 methods of loading these plugins:
- Load only authorized plugins (developed by the owner of the software)
- Load all plugins
And we need to be reasonably secure that the authorized plugins are the real deal (unmodified). However all plugins must be in seperate assemblies. I’ve been looking at using strong named assemblies for the plugins, with the public key stored in the loader application, but to me this seems too easy to modify the public key within the loader application (if the user was so inclined) regardless of any obfuscation of the loader application. Any more secure ideas?
Basically, if you’re putting your code on someone else’s machine, there’s no absolute guarantee of security.
You can look at all kinds of security tricks, but in the end, the code is on their machine so it’s out of your control.
How much do you stand to lose if the end user loads an unauthorised plugin?