Ricardo Palomares Martínez <[email protected]> wrote: > El 13/09/13 21:41, David E. Ross escribió: >> Windows XP SP3 >> SeaMonkey 2.20 >> Java 7 u40 (7.0.400.43) >> >> Certain Web sites that I have visited for quite a few years use Java. >> Now, whenever I visit any those sites for the first time after a fresh >> launching of SeaMonkey, I get a dialogue popup that says: >>> Do you want to run this application? >>> An unsigned application from the location below is requesting to run. >>> etc, etc, etc >>> [checkbox] I accept this risk and want to run this app. > > > That dialog comes from Java itself, not from SeaMonkey. Starting with > Java 7u21, Java requires the applets to be signed always. It is a try > from Oracle to enhance Java security in the browser (and a failed one, > as some people explains [1]). > > [1] http://www.duckware.com/tech/javacodesigningfailure.html > > HTH
Another bug failure of the whole "signed code" concept is that even if it is implemented completely correctly, it only tells you who wrote the code (even if a name is a unique identification of that person or entity), it does not tell you what the code is going to do on your system. There should be a list of possible dangers the code can cause, which the programmer sets (to its bare minimum) and the JRE checks. Like: read files, modify files, delete files, access the network, etc. Only then, the user can judge if he wants to risk running the app. _______________________________________________ support-seamonkey mailing list [email protected] https://lists.mozilla.org/listinfo/support-seamonkey
