title: Do I need to publish the public key from .snk file?
body: <p>From the description of sn.exe utility and <a href="https://stackoverflow.com/questions/131181/what-is-a-snk-for">this question</a> I see that a copy of the public key is added to every assembly signed with the strong name. This is enough to validate that the assembly binary has not been altered.</p>
  
  <p>But how does one verify that given assembly was really signed with some given keypair and compiled by a given company? Anyone could generate his own keypair, produce some assembly and sign it with his keypair. Do I need to publish the public key so that those who want to verify the assembly origin could compare the public keys? if so, what is the best way to do so?</p>