Closed GoogleCodeExporter closed 8 years ago
Checking "always allow" will only permit applets using the same exact
certificate to run. This will not permit "all" applets to run.
See Control Panel --> Java --> Security --> Certificates. There you can revoke
previously "always allowed" certificates.
If this is still a security concern of yours, consider purchasing a Signed
Certificate for Java. Pricing is about $250/year (give or take).
https://www.symantec.com/verisign/code-signing/java
http://www.thawte.com/code-signing/content-signing-certificates/sun-java/
Once this certificate is obtained, you will need to compile and sign the applet
yourself using TutorialSignatureChange
(http://code.google.com/p/jzebra/wiki/TutorialSignatureChange) and additional
compilation help from the mailing list.
Closing and marking bug as invalid. Please reopen if this was closed in error.
-Tres
Original comment by tres.fin...@gmail.com
on 11 Oct 2012 at 9:13
Hi Tres,
Thanks for your quick reply.
So if I check "Always trust content from the publisher", where in your applet
the publisher's Name is "UNKNOWN", then other applets with the publisher Name
"UNKNOWN" will not be able to run automatically? In other words, checking that
box will not allow any other applets to run automatically?
That is how I interpreted your message, but I just want to make sure.
Thanks,
Nate
Original comment by nathanho...@gmail.com
on 11 Oct 2012 at 9:25
Correct. This does not eliminate the security concerns, only mitigates it. I
would rather elaborate about security risks in email as to not "fuel the fire"
so to speak. tres.finocchiaro@gmail.com.
-Tres
Original comment by tres.fin...@gmail.com
on 11 Oct 2012 at 9:30
Original issue reported on code.google.com by
nathanho...@gmail.com
on 11 Oct 2012 at 8:46