Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 289
  • Last Modified:

Give permissions to unsigned applets in Netscape

I have written a java applet to be used on our company's intranet. The applet needs to access the system clipboard. For IE users, the intranet is in the 'trusted zone' and so even unsigned applets can access the system clipboard. Is there any way to do something similar on Netscape browser. Activating codebase principles would be ony way to go (http://developer.netscape.com/docs/technote/security/sectn2.html) but this would allow applets from outside the intranet also to do what ever they want. Installing the applet locally on every machine is also dificult. If you have any suggestions, I'd be glad to hear it.
--regards
Rajesh Vijayakumar
0
vijayk
Asked:
vijayk
  • 2
  • 2
1 Solution
 
msmolyakCommented:
Why not sign an applet? Since it is for internal use you can even sign it without getting a certificate from the proper authority. You can then use Netscape's Capabilities API to request extra privileges. This API can also be used for unsigned applets loaded from CLASSPATH (but that would require installing applets locally, the thing you are trying to avoid).

The bottom line: Netscape's security model is very different from Microsoft's one. To request privileges applets have to use Capabilities API and to da that they have to be signed or come from the CLASSPATH.

0
 
vijaykAuthor Commented:
I haven't used code signing before so I am somewhat ignorent on the subject. When you say I don't need to get the certificate from the proper authority, do you mean I can generate certificates my self? How? And if I have my own certificate, should'nt there be a certificate server or something on the nerwork to verify it? I don't want Navigator to tell the users that the certificate could not be verfied and thus frighten them off.
0
 
msmolyakCommented:
Yeah, of course if you want a verifiable certificate you need to purchase one. I got one from Thawte, the process is somewhat of a hassle (you need to send them all sort of papers), but technically it is pretty easy.

Try this link for more info:
http://www.suitable.com/Doc_CodeSigning.shtml.

Netscape's Web site has plenty of info on how to use Netscape's signing tools.
0
 
vijaykAuthor Commented:
That site has pretty detailed expalnations on code signing. Thank you for letting me know.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now