You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I’d like to request official signing support for distributed binaries and packages. so that signed assemblies and verified package provenance before dependencies can be approved. This can help with adoption in more regulated enterprise cases.
Strong-name signing
Ensure all published assemblies are strong-named
Publish the public key so consumers can reference it safely
Author-signed NuGet packages
Sign packages with a trusted certificate (NuGet author signing)
This allows consumers to validate publisher identity instead of relying solely on repository signing
Authenticode signing
Sign DLLs using an Authenticode code-signing certificate
This enables verification via Windows trust chain and enterprise allowlists
Activity
alexanderlinne commentedon Jun 12, 2026
Hi @exp-ouroborous, strong-naming is already implemented since version 0.13.2. Regarding singing, we'll look into it.
avidenic commentedon Oct 1, 2026
To add to this, you can also use https://signpath.io/ - it is free for open source project.