Path: csiph.com!aioe.org!.POSTED!not-for-mail From: =?UTF-8?Q?Arne_Vajh=c3=b8j?= Newsgroups: comp.lang.java.programmer Subject: Re: A very dark day indeed :-( Date: Mon, 8 Feb 2016 17:22:24 -0500 Organization: Aioe.org NNTP Server Lines: 31 Message-ID: References: NNTP-Posting-Host: ANasIS7Js9OyLQwgloeBLQ.user.gioia.aioe.org Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit X-Complaints-To: abuse@aioe.org User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 X-Notice: Filtered by postfilter v. 0.8.2 Xref: csiph.com comp.lang.java.programmer:33693 On 2/8/2016 4:39 PM, Richard Maher wrote: > On 2/9/2016 1:55 AM, Arne Vajhøj wrote: >> On 2/8/2016 8:50 AM, Thomas Richter wrote: >>> What I do not understand is how Java applets can be insecure and at the >>> same time, Java webstart is supposed to be secure. In the end, it's all >>> the same java virtual machine behind it, with the same security problems >>> and the same issues to begin with. >>> >>> So why that helps is really not clear to me. >> >> Good question. >> >> Maybe because it prompts differently!? >> > > My guess was they'd claim web-start forces you to use the latest JVM > version. No. You can specify what Java version you want in the JNLP. > But I agree with Thomas is that web-start won't work in Chrome or Edge. I can run Java Web Start from Chrome. When I hit a link to JNLP I first need to say OK and then a small option show up in the bottom where I can chose open, amd then it runs. Arne