Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!newsfeed.fsmpi.rwth-aachen.de!news.mixmin.net!aioe.org!.POSTED!not-for-mail From: emf Newsgroups: comp.lang.java.programmer Subject: Re: Signing an applet Date: Tue, 17 Dec 2013 17:40:55 -0500 Organization: Aioe.org NNTP Server Lines: 79 Message-ID: References: <52adc266$0$293$14726298@news.sunsite.dk> NNTP-Posting-Host: P/jcyU9BgtZ3ZqKhBcTaCQ.user.speranza.aioe.org Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Complaints-To: abuse@aioe.org User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 X-Notice: Filtered by postfilter v. 0.8.2 Xref: csiph.com comp.lang.java.programmer:26982 On 2013-12-15 09:53 Arne Vajhøj wrote: > On 12/15/2013 12:04 AM, emf wrote: >> On 2013-12-14 00:11 Wayne wrote: >>> On 12/13/2013 8:40 AM, emf wrote: >>>> I am trying to understand how to self-sign an applet. I've already >>>> checked websites >>>> that provide directions, but unfortunately I realized that my >>>> relevant knowledge is >>>> too limited to start understanding what they are talking about, so I >>>> post here hoping >>>> I'll get some help to get me started. >>> >>> To sign a jar file: >>> >>> Part I: Create an unsigned applet that just needs to be signed to work: >>> >>> ... >> >> That was quite an interesting article. I have to read again more >> carefully. The impression, however, that I have gotten so far is that >> there have been serious security problems with Java applets, > > Yes - there has been found a lot of those the last couple of years. > >> them sign by an official authority is expensive, > > Depends on the definition of expensive. > > :-) > >> and that instead of >> having the applet embedded in the webpage probably a better idea is to >> have the visitor choose to download the jar file on his desktop, and >> open the applet by clicking on it. Is my impression wrong? > > It is a lot simpler. > > But note that you are moving from a deployment model where > there may be holes int he sandbox security model to a model > with no sandbox at all, and from a web page model to a > desktop app model. > > If you really need a signed applet in the first place, then > switching to a desktop app may not meet requirements. > > Arne When I first tried to deploy the applet on a webpage, I was surprised that there was a security risk, and so I had to use a different method from the one in the textbook to read the data file to fill in the array. However, there is a better solution: JavaScript. The reason I had chosen Java for this program was because I wanted it to read a long text (csv) file. But then I thought why not make the csv a js file, containing an long array[54786][3]. I'll restrict the JavaScript program to the 2 significant planets, so the js file starts with var ephem = [["19000101","27i43","10i08"], ["19000102",... instead of 19000101,01i08,27i43,10i08,25c13,15c15 19990102,... No security problem whatsoever. The 2 planets js file is smaller then the 5 planets csv, but the jar file is even smaller, so I'll be looking to see if it is already possible to use a zipped js file, otherwise the js will have to do as is. And I will have a link to the jar file with the 5 planets transits for those who are interested and trust me. They have been extending JavaScript a lot. If Oracle is phasing out applets as I've heard, JavaScript will be even more important for the web that it is right now. emf -- Google's top Spherical Triangle Calculator search result! https://files.nyu.edu/emf202/public/js/spherical.html