John Lam's first issue: iunknown.com: Practical Eye for the .NET Guy and the PDC

PDC, pre conference.

Can write a user-control that IE will download on the fly and display. (Kinda like an ATL composite control), except it's NOT an ActiveX control.

IE 5.01 supports .NET components automatic download, without security warning --- since the managed code runs in the .NET security "sandbox".

syntax:
<object id="dan" classid="iectrl.dll#iectrl.Usercontrol1" height=10 width=10>
<param name="foo" value="bar" / >
</object>

(Params are set using reflection -- set the public property called "foo" -- to value "bar" )

In demo, the control fired an event -- to be captured by JScript in the browser. This fails with code access security exception. Use .NET configuration "wizard" -- instead of changing security for an entire ZONE (intranet, etc), you can change security for a single assembly.
(This ends up creating a new code access "group" in the standard .NET security configuration, and applying your security choices to it)