1001bit tools sketchup 2017

broken image

Signing gives that impression, however they sign developer’s RBZs with no checks as to the code’s intentions - malicious or not - so it’s somewhat illusory.Ī signed extension cannot be altered without it breaking the signed-hash, but if you get your RBZs from a reputable source like EWH, SketchUcation, Smustard or established developers sites, then the issue of it being signed is somewhat academic.

broken image

Trimble had this idea that users wanted the comfort of having ‘certified’ extensions. If you trust the source, then running SketchUp in ‘unrestricted’ loading-policy is unlikely to be dangerous and unsigned and in house code will run without difficulty. Also with a new version many developers are playing catchup - to make their code compatible and/or submit their RBZs to be re-signed.

broken image