From 675c6df19d70b26be59f473fee127d328aa8a381 Mon Sep 17 00:00:00 2001 From: Andrew Schwartzmeyer Date: Thu, 19 May 2016 14:59:35 -0700 Subject: [PATCH] Add SecureString known issue --- docs/KNOWNISSUES.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/docs/KNOWNISSUES.md b/docs/KNOWNISSUES.md index 0ee745caf..f604d1883 100644 --- a/docs/KNOWNISSUES.md +++ b/docs/KNOWNISSUES.md @@ -1,5 +1,18 @@ # Known Issues +## SecureString + +The `SecureString` class is *not* the well-known C# `SecureString`, as the +library is not available in .NET Core. However, PowerShell continues to use the +type for two main reasons: FullCLR compatibility, and as a specially-treated +type (that is, behavior is dependent on the type being `SecureString`). Instead, +the `SecureString` is Mono's completely not secure whatsoever, but open-source +and "compatible" stub that acts just like a plaintext `StringBuilder`. **It has +no encryption.** + +Additionally `ReadLineSafe` is not implemented, meaning `Get-Credential` fails +with `PlatformNotSupportedException`. + ## `ControlPanelItemCommand.cs` The file `monad/src/commands/management/ControlPanelItemCommand.cs` has been removed