Re: Signing applets to load from any server

From:

"Andrew Thompson" <andrewthommo@gmail.com>

Newsgroups:

comp.lang.java.programmer

Date:

25 Oct 2006 00:52:51 -0700

Message-ID:

<1161762771.085875.181310@m7g2000cwm.googlegroups.com>

Dag Sunde wrote:

Andrew Thompson wrote:

luke@webber.com.au wrote:
...

....Is there such a thing as a code signing
certificate which can be served from any host/domain?

Are you sure that these 'specific domain' certs. do *not*
work off every domain? I find the idea rather extraordinary,
even for Thawte (whom I consider to be 'highway robbers').

I believe the code signing certificate for signing MS .cab files

Oh, CAB files, right... (I missed that)

is quite a different animal that an ordinary
"Digital ID Class 3" that I use for "Java Object Signing".

With my "Class 3 ID" from Verisign (I have bought this from Thawte
too...), I can sign Applets and deploy them on any server I like.

Cool.

Luke - I hope you solve your conundrum, but remind
whoever made that decision, that the number of MSVM's
is fading every day, and the *best* advice a company
can give to users of the MSVM is to upgrade to a
VM that is not obsolete, insecure* and unsupported.

* There are differences in security behaviour between
the 3810 (final) build of the 1.1.4 MSVM and the
Symantec 1.1.5 VM that are a little worrying, at
the very least.

Personally, I'd launch any (trusted) applet using web
start and specifying Java '1.2+' - but maybe that's just me..

Andrew T.