designs icon indicating copy to clipboard operation
designs copied to clipboard

Published 20 hours ago • verified publisher icon dotnet

SecureString obsoletions and shrouded buffer proposal

Open GrabYourPitchforks opened this issue 4 years ago • 55 comments

This document addresses obsoleting certain SecureString APIs for .NET 6. It is a type we have wanted to wind down for a while, and we have some outstanding work items that can address the reasons devs used SecureString in the first place.

This document also proposes a new API ShroudedBuffer<T> that is a more flexible and usable form of SecureString. There is a link to the work (already done) of rewriting SecureString in terms of this API as an implementation detail.

Related: https://github.com/dotnet/runtime/issues/30612

/cc @terrajobst @blowdart @bartonjs @jeffhandley

GrabYourPitchforks avatar Jul 21 '20 19:07 GrabYourPitchforks