VBP itself doesn't connect to anything external. VBP does verify its digital signature at times (for security reasons). I suspect what's happening is that calling the Windows API to verify a signature (
WinVerifyTrust) causes Windows to retrieve a certificate revocation list (CRL) to determine if the certificate has been revoked.
setreg.exe can be used to prevent the external lookup:
http://blogs.msdn.com/heaths/archive...rror-1330.aspx
There also appears to be a flag available to prevent the revocation list lookup when verifying a signature, which we'll use in the next release.
06-30-2009, 10:06 AM
Threaded Mode