Re: [Jmol-users] Important Java changes - January 2014

2013-11-06 Thread Angel Herráez
Dear all, I fully agree with Henry's considerations. This might be a nontrivial issue for the future of Jmol. On the other hand, I also hope that things may be simpler, as Nico is presenting them. I would not like to give up using the applet! Nico, I downloaded yout test signed Jmol and run a

Re: [Jmol-users] Important Java changes - January 2014

2013-11-06 Thread Nicolas Vervelle
On Wed, Nov 6, 2013 at 9:45 AM, Angel Herráez angel.herr...@uah.es wrote: Indeed, when I looked at the applet files, they are not dated 4 Nov as the main files, but 31 Oct, so maybe the old nonsigned files got in the package? Thanks Angel, I will look into it this evening. I made several

Re: [Jmol-users] Important Java changes - January 2014

2013-11-06 Thread Rzepa, Henry S
On 6 Nov 2013, at 08:45, Angel Herráez angel.herr...@uah.es wrote: Dear all, I fully agree with Henry's considerations. This might be a nontrivial issue for the future of Jmol. On the other hand, I also hope that things may be simpler, as Nico is presenting them. I would not like to

Re: [Jmol-users] Important Java changes - January 2014

2013-11-06 Thread Nina Jeliazkova
On 6 November 2013 11:02, Rzepa, Henry S h.rz...@imperial.ac.uk wrote: On 6 Nov 2013, at 08:45, Angel Herráez angel.herr...@uah.es wrote: Dear all, I fully agree with Henry's considerations. This might be a nontrivial issue for the future of Jmol. On the other hand, I also hope that

Re: [Jmol-users] Important Java changes - January 2014

2013-11-06 Thread Rzepa, Henry S
On 6 Nov 2013, at 09:20, Nina Jeliazkova jeliazkova.n...@gmail.com wrote: JavaScript is pretty much catching up in speed and ubiquity. Many benchmarks point in this direction http://benchmarksgame.alioth.debian.org/u64/benchmark.php?test=alllang=v8lang2=javadata=u64 Best regards,

Re: [Jmol-users] Important Java changes - January 2014

2013-11-06 Thread sw
Although Jsmol is impressive, far too often I get 'script taking too long' messages from the browser, so although I believe the future of Jmol lies in Jsmol, I woul not like to lose the java applet at this time simply because of supposed security threats... Cheers Simon Quoting Rzepa,

Re: [Jmol-users] Important Java changes - January 2014

2013-11-06 Thread Dave Howorth
Nicolas Vervelle wrote: On Wed, Nov 6, 2013 at 8:11 AM, Rzepa, Henry S h.rz...@imperial.ac.ukwrote: I think this is great for testing, but what will happen in “production mode” Inevitably when one talks to large organisations (as I did with the ACS and RSC), they ask “what will our lawyers

Re: [Jmol-users] Important Java changes - January 2014

2013-11-06 Thread Rzepa, Henry S
We have a similar problem at Imperial College in our finance division. On line access to the accounting system is via a Java applet! At the moment, this is self-signed, and so they have the same problem as Jmol has. One presumes that anything to do with finance will have to be carefully

Re: [Jmol-users] Important Java changes - January 2014

2013-11-06 Thread sw
I have been in touch with an organization that is prepared to sponsor the certification - i.e. they will donate the money - but it is unlikely that they would want the certificate in their name, partly because of the legal considerations and partly because they feel strongly that such

Re: [Jmol-users] Important Java changes - January 2014

2013-11-06 Thread Nicolas Vervelle
On Wed, Nov 6, 2013 at 1:00 PM, s...@publcif.co.uk wrote: Although Jmol is opensource, I assume the certificate isnt, so there shouldnt be an issue with anyone modifying the Jmol source and putting it out with the same certificate - pointless exercise otherwise? I think that the

Re: [Jmol-users] Important Java changes - January 2014

2013-11-06 Thread Robert Hanson
we will be experimenting with trusted-certificate code signing today. Stay tuned! On Wed, Nov 6, 2013 at 4:11 AM, Nicolas Vervelle nverve...@gmail.comwrote: On Wed, Nov 6, 2013 at 1:00 PM, s...@publcif.co.uk wrote: Although Jmol is opensource, I assume the certificate isnt, so there

Re: [Jmol-users] Important Java changes - January 2014

2013-11-05 Thread Rzepa, Henry S
On 3 Nov 2013, at 08:57, Nicolas Vervelle nverve...@gmail.com wrote: Hi Bob, I know I have a full certificate, valid for one year, but it's unclear what I will have to do in one year : I'm not sure if renewal is still free or requires some money. It's the only option I found that

Re: [Jmol-users] Important Java changes - January 2014

2013-11-05 Thread Nicolas Vervelle
Hi, On Tue, Nov 5, 2013 at 4:16 PM, Rzepa, Henry S h.rz...@imperial.ac.ukwrote: I have been discussing this with the ACS and RSC; I have a total of about 40 Jmol objects in these and other journals which rely on the Jmol applet working in a browser. They will all die in Jan 2014 unless

Re: [Jmol-users] Important Java changes - January 2014

2013-11-05 Thread Rzepa, Henry S
The only free certificates I've found for now are for one individual, not an organisation. The one I got from Certum requires a true name, with a copy of an id document, so that they have some guarantee. I think this is great for testing, but what will happen in “production mode”

Re: [Jmol-users] Important Java changes - January 2014

2013-11-05 Thread Nicolas Vervelle
On Wed, Nov 6, 2013 at 8:11 AM, Rzepa, Henry S h.rz...@imperial.ac.ukwrote: The only free certificates I've found for now are for one individual, not an organisation. The one I got from Certum requires a true name, with a copy of an id document, so that they have some guarantee. I

Re: [Jmol-users] Important Java changes - January 2014

2013-11-03 Thread Nicolas Vervelle
Hi Bob, I know I have a full certificate, valid for one year, but it's unclear what I will have to do in one year : I'm not sure if renewal is still free or requires some money. It's the only option I found that allowed me to have a free code signing certificate for the moment, so I decided to

Re: [Jmol-users] Important Java changes - January 2014

2013-11-03 Thread Jaime Prilusky
Excellent. Will this also be true for the applet version? In one year from now we’ll see if Java's still required, and, if the renewal requires a payment, find sources for that. Jaim __ Dr Jaime Prilusky Head Bioinformatics RD Bioinformatics and Data Management Department of Biological Services

Re: [Jmol-users] Important Java changes - January 2014

2013-11-03 Thread Nicolas Vervelle
Hi, Yes, I think it's the same for applets as for Java Web Start applications. I haven't tested, but I see no reasons for it to be different. Nico On Sun, Nov 3, 2013 at 10:17 AM, Jaime Prilusky jaime.prilu...@weizmann.ac.il wrote: Excellent. Will this also be true for the applet version?

Re: [Jmol-users] Important Java changes - January 2014

2013-11-02 Thread sw
Assuming the $500 certificate ensures that the signed Jmol java applet will not be blocked (?), I suspect there are a number of organizations that would be prepared to become sponsors... Quoting Robert Hanson hans...@stolaf.edu: I direct the discussion to

Re: [Jmol-users] Important Java changes - January 2014

2013-11-02 Thread Jonathan Gutow
Ouch! I've been out of the loop for a while trying to get caught up on local work issues. This does not sound good. As I read the description from Oracle the only way to use Java in browsers that does not require a commercial certificate and a codebase compiled for each server (possibly you

Re: [Jmol-users] Important Java changes - January 2014

2013-11-02 Thread Nicolas Vervelle
Hi Jonathan, I think we can try using free certificates, I've got one 2 weeks ago from certum as they give them for free to open source developers. I'm using it for a Java application, and it seems to work a lot better than with the self signed one. If need be, I can sign a Jmol version with it

Re: [Jmol-users] Important Java changes - January 2014

2013-11-02 Thread Robert Hanson
On Sat, Nov 2, 2013 at 1:49 PM, Jonathan Gutow gu...@uwosh.edu wrote: Ouch! I've been out of the loop for a while trying to get caught up on local work issues. This does not sound good. As I read the description from Oracle the only way to use Java in browsers that does not require a

Re: [Jmol-users] Important Java changes - January 2014

2013-11-02 Thread Robert Hanson
hang in there. I think we will be ok. But, Nico, are you sure you don't have a 'trial version' On Sat, Nov 2, 2013 at 2:20 PM, Nicolas Vervelle nverve...@gmail.comwrote: Hi Jonathan, I think we can try using free certificates, I've got one 2 weeks ago from certum as they give them for free

[Jmol-users] Important Java changes - January 2014

2013-10-31 Thread Robert Hanson
I direct the discussion to https://blogs.oracle.com/java-platform-group/entry/new_security_requirements_for_rias I believe this is the end of the unsigned Jmol Java applet along with JSpecView and JME. In addition, I'm pretty sure our free-be signing will not pass muster as a trusted authority: