Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.java.programmer > #26985

Re: Signing an applet

Show all headers | View raw

On 12/17/2013 5:40 PM, emf wrote:
> On 2013-12-15 09:53 Arne Vajhøj wrote:
>> On 12/15/2013 12:04 AM, emf wrote:
>>> On 2013-12-14 00:11 Wayne wrote:
>>>> On 12/13/2013 8:40 AM, emf wrote:
>>>>> I am trying to understand how to self-sign an applet. I've already
>>>>> checked websites
>>>>> that provide directions, but unfortunately I realized that my
>>>>> relevant knowledge is
>>>>> too limited to start understanding what they are talking about, so I
>>>>> post here hoping
>>>>> I'll get some help to get me started.
>>>>
>>>> To sign a jar file:
>>>>
>>>> Part I: Create an unsigned applet that just needs to be signed to work:
>>>>
>>>> ...
>>>
>>> That was quite an interesting article. I have to read again more
>>> carefully. The impression, however, that I have gotten so far is that
>>> there have been serious security problems with Java applets,
>>
>> Yes - there has been found a lot of those the last couple of years.
>>
>>> them sign by an official authority is expensive,
>>
>> Depends on the definition of expensive.
>>
>> :-)
>>
>>>                                           and that instead of
>>> having the applet embedded in the webpage probably a better idea is to
>>> have the visitor choose to download the jar file on his desktop, and
>>> open the applet by clicking on it. Is my impression wrong?
>>
>> It is a lot simpler.
>>
>> But note that you are moving from a deployment model where
>> there may be holes int he sandbox security model to a model
>> with no sandbox at all, and from a web page model to a
>> desktop app model.
>>
>> If you really need a signed applet in the first place, then
>> switching to a desktop app may not meet requirements.
>
> When I first tried to deploy the applet on a webpage, I was surprised
> that there was a security risk, and so I had to use a different method
> from the one in the textbook to read the data file to fill in the array.
>
> However, there is a better solution: JavaScript. The reason I had chosen
> Java for this program was because I wanted it to read a long text (csv)
> file. But then I thought why not make the csv a js file, containing an
> long array[54786][3]. I'll restrict the JavaScript program to the 2
> significant planets, so the js file starts with
>
> var ephem = [["19000101","27i43","10i08"], ["19000102",...
>
> instead of
>
> 19000101,01i08,27i43,10i08,25c13,15c15
> 19990102,...
>
> No security problem whatsoever. The 2 planets js file is smaller then
> the 5 planets csv, but the jar file is even smaller, so I'll be looking
> to see if it is already possible to use a zipped js file, otherwise the
> js will have to do as is. And I will have a link to the jar file with
> the 5 planets transits for those who are interested and trust me.

As long as the CSV files are served from the same server as the JS, then
the JS should be able to retrieve and parse the CSV using
XmlHttpRequest.

> They have been extending JavaScript a lot. If Oracle is phasing out
> applets as I've heard, JavaScript will be even more important for the
> web that it is right now.

I don't think Oracle is really changing anything regarding applets.
Applets has not been mainstream for more than a decade.

And JavaScript does not care. It is already 10000 more widely used
than Java applets.

Arne

Back to comp.lang.java.programmer | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Signing an applet emf <emfril@gmail.com> - 2013-12-13 08:40 -0500
  Re: Signing an applet Jeff Higgins <jeff@invalid.invalid> - 2013-12-13 09:52 -0500
    Re: Signing an applet emf <emfril@gmail.com> - 2013-12-13 10:12 -0500
      Re: Signing an applet Jeff Higgins <jeff@invalid.invalid> - 2013-12-13 10:30 -0500
      Re: Signing an applet Arne Vajhøj <arne@vajhoej.dk> - 2013-12-14 16:22 -0500
        Re: Signing an applet lipska the kat <"lipskathekat at yahoo dot co dot uk"> - 2013-12-14 21:24 +0000
  Re: Signing an applet lipska the kat <"lipskathekat at yahoo dot co dot uk"> - 2013-12-13 15:08 +0000
  Re: Signing an applet emf <emfril@gmail.com> - 2013-12-13 10:11 -0500
    Re: Signing an applet Jeff Higgins <jeff@invalid.invalid> - 2013-12-13 10:19 -0500
    Re: Signing an applet lipska the kat <"lipskathekat at yahoo dot co dot uk"> - 2013-12-13 15:27 +0000
      Re: Signing an applet emf <emfril@gmail.com> - 2013-12-13 11:08 -0500
    Re: Signing an applet Arne Vajhøj <arne@vajhoej.dk> - 2013-12-14 16:27 -0500
  Re: Signing an applet Wayne <nospam@all.invalid> - 2013-12-14 00:11 -0500
    Re: Signing an applet lipska the kat <"lipskathekat at yahoo dot co dot uk"> - 2013-12-14 11:41 +0000
      Re: Signing an applet Wayne <nospam@all.invalid> - 2013-12-15 22:22 -0500
    Re: Signing an applet Hiram Hunt <hiramhunt@verizon.net> - 2013-12-14 09:32 -0500
      Re: Signing an applet Hiram Hunt <hiramhunt@verizon.net> - 2013-12-14 09:39 -0500
        Re: Signing an applet Joerg Meier <joergmmeier@arcor.de> - 2013-12-14 15:48 +0100
    Re: Signing an applet emf <emfril@gmail.com> - 2013-12-15 00:04 -0500
      Re: Signing an applet Arne Vajhøj <arne@vajhoej.dk> - 2013-12-15 09:53 -0500
        Re: Signing an applet emf <emfril@gmail.com> - 2013-12-17 17:40 -0500
          Re: Signing an applet Arne Vajhøj <arne@vajhoej.dk> - 2013-12-17 18:08 -0500
            Re: Signing an applet Richard Maher <maher_rjSPAMLESS@hotmail.com> - 2013-12-21 08:35 +0800
              Re: Signing an applet emf <emfril@gmail.com> - 2013-12-31 11:44 -0500
                Re: Signing an applet Arne Vajhøj <arne@vajhoej.dk> - 2014-01-04 20:14 -0500
              Re: Signing an applet Arne Vajhøj <arne@vajhoej.dk> - 2014-01-04 20:11 -0500
                Re: Signing an applet Richard Maher <maher_rjSPAMLESS@hotmail.com> - 2014-01-06 08:04 +0800

csiph-web