Solved

Give permissions to unsigned applets in Netscape

Posted on 1998-10-28
4
277 Views
Last Modified: 2012-06-27
I have written a java applet to be used on our company's intranet. The applet needs to access the system clipboard. For IE users, the intranet is in the 'trusted zone' and so even unsigned applets can access the system clipboard. Is there any way to do something similar on Netscape browser. Activating codebase principles would be ony way to go (http://developer.netscape.com/docs/technote/security/sectn2.html) but this would allow applets from outside the intranet also to do what ever they want. Installing the applet locally on every machine is also dificult. If you have any suggestions, I'd be glad to hear it.
--regards
Rajesh Vijayakumar
0
Comment
Question by:vijayk
  • 2
  • 2
4 Comments
 
LVL 5

Accepted Solution

by:
msmolyak earned 100 total points
ID: 1226547
Why not sign an applet? Since it is for internal use you can even sign it without getting a certificate from the proper authority. You can then use Netscape's Capabilities API to request extra privileges. This API can also be used for unsigned applets loaded from CLASSPATH (but that would require installing applets locally, the thing you are trying to avoid).

The bottom line: Netscape's security model is very different from Microsoft's one. To request privileges applets have to use Capabilities API and to da that they have to be signed or come from the CLASSPATH.

0
 

Author Comment

by:vijayk
ID: 1226548
I haven't used code signing before so I am somewhat ignorent on the subject. When you say I don't need to get the certificate from the proper authority, do you mean I can generate certificates my self? How? And if I have my own certificate, should'nt there be a certificate server or something on the nerwork to verify it? I don't want Navigator to tell the users that the certificate could not be verfied and thus frighten them off.
0
 
LVL 5

Expert Comment

by:msmolyak
ID: 1226549
Yeah, of course if you want a verifiable certificate you need to purchase one. I got one from Thawte, the process is somewhat of a hassle (you need to send them all sort of papers), but technically it is pretty easy.

Try this link for more info:
http://www.suitable.com/Doc_CodeSigning.shtml.

Netscape's Web site has plenty of info on how to use Netscape's signing tools.
0
 

Author Comment

by:vijayk
ID: 1226550
That site has pretty detailed expalnations on code signing. Thank you for letting me know.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Go is an acronym of golang, is a programming language developed Google in 2007. Go is a new language that is mostly in the C family, with significant input from Pascal/Modula/Oberon family. Hence Go arisen as low-level language with fast compilation…
Introduction This article is the first of three articles that explain why and how the Experts Exchange QA Team does test automation for our web site. This article explains our test automation goals. Then rationale is given for the tools we use to a…
Viewers learn how to read error messages and identify possible mistakes that could cause hours of frustration. Coding is as much about debugging your code as it is about writing it. Define Error Message: Line Numbers: Type of Error: Break Down…
Viewers will learn about if statements in Java and their use The if statement: The condition required to create an if statement: Variations of if statements: An example using if statements:

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now