locked
IIS 8.0: ASP.NET 4.0+ (4.5) in Full trust on shared webhosting? RRS feed

  • Question

  • User1994556403 posted

    Note: cross-post from iis.net: http://forums.iis.net/t/1197289.aspx

    Nowadays more and more .NET website applications are unable to function in a (modified) medium trust .NET webhosting environment. Like some Umbraco extensions, Orchard CMS (since 1.6), other CMS-s, and so on.

    I read something about changes to Security and Code Access Security in 4.0+:

    does this mean we no longer have to set up a (modified) medium trust configuration file on .NET 4.0+ (4.5), on Windows Server 2012 / IIS 8.0? Eventhough I would prefer to do so...

    My main concern and question is: can you safely run .NET 4.0+ (4.5) in Full trust on a shared hosting Win2012/IIS 8.0 web server? (opposed to .NET 1.0 through 2.0/3.5, where that's not a save option).

    Wednesday, May 22, 2013 10:33 AM

Answers

  • User13850534 posted

    Most iis 8.0 hosting providers be able to support full trust

    • Marked as answer by Anonymous Thursday, October 7, 2021 12:00 AM
    Monday, May 27, 2013 2:04 AM
  • User-166373564 posted

    Hi JanReilink

    does this mean we no longer have to set up a (modified) medium trust configuration file on .NET 4.0+ (4.5), on Windows Server 2012 / IIS 8.0?

    In general Full trust allows you full access to all the sites, so only you should grant full trust to trusted environments.

    Most web hosting companies run in medium trust, which greatly reduces the potential for harm by limiting the set of operations an ASP.NET application can perform. While the protection granted by medium trust is reassuring, its limited functionality can be aggrevating for honest developers.

    At the same time use the medium trust level to help ensure that applications cannot read each other's data or interfere with one another in any way. Medium trust also places restrictions on the types of shared system resources that the applications can access.

     

    hope it helps you,

    With regards

    • Marked as answer by Anonymous Thursday, October 7, 2021 12:00 AM
    Monday, May 27, 2013 11:29 PM

All replies

  • User361859439 posted

    Hi Jan,

    Yes, you can safely run .NET 4.0+ (4.5) in Full trust on a shared hosting Win2012/IIS 8.0 web server. We at M6.NET do provide this feature.

    Wednesday, May 22, 2013 9:09 PM
  • User311508580 posted

    Hi JanReilink,

    We believe that you can run Umbraco, Orchard, etc on our shared hosting environment. We do support Full Trust hosting. :)

    Wednesday, May 22, 2013 9:38 PM
  • User13850534 posted

    Most iis 8.0 hosting providers be able to support full trust

    • Marked as answer by Anonymous Thursday, October 7, 2021 12:00 AM
    Monday, May 27, 2013 2:04 AM
  • User-166373564 posted

    Hi JanReilink

    does this mean we no longer have to set up a (modified) medium trust configuration file on .NET 4.0+ (4.5), on Windows Server 2012 / IIS 8.0?

    In general Full trust allows you full access to all the sites, so only you should grant full trust to trusted environments.

    Most web hosting companies run in medium trust, which greatly reduces the potential for harm by limiting the set of operations an ASP.NET application can perform. While the protection granted by medium trust is reassuring, its limited functionality can be aggrevating for honest developers.

    At the same time use the medium trust level to help ensure that applications cannot read each other's data or interfere with one another in any way. Medium trust also places restrictions on the types of shared system resources that the applications can access.

     

    hope it helps you,

    With regards

    • Marked as answer by Anonymous Thursday, October 7, 2021 12:00 AM
    Monday, May 27, 2013 11:29 PM