.NET Frameworkで提供される System.Security.SecureStringクラス は、新規コードでは利用しないこと。
- .NET CoreからはSecureStringクラスは削除されている。
- MonoではSecureStringクラスはデータ保護を行わない（mono-5.18.0.245現在）
Important
We don't recommend that you use the
https://docs.microsoft.com/en-us/dotnet/api/system.security.securestringSecureStringclass for new development. For more information, see SecureString shouldn't be used on GitHub.
Recommendation
Don't use SecureString for new code. When porting code to .NET Core, consider that the contents of the array are not encrypted in memory.
DE0001 SecureString shouldn't be used
The general approach of dealing with credentials is to avoid them and instead rely on other means to authenticate, such as certificates or Windows authentication.
関連URL
