Re: signed applets?
Eric Lavarde <Eric@Lavar.de> writes:
> Hi,
hi Emmanuel, hi Eric,
> Emmanuel Bourg <ebourg@apache.org> wrote:
>>Le 09/11/2013 18:59, Felix Natter a écrit :
>>
>>> Freeplane also has applet support (for viewing mindmaps), which is
>>now
>>> signed upstream (using certum.eu)
>>>
>>> => I would also be interested into signing a jar for use with Debian
>>> (since I don't have the upstream private key when building the
>>package)
>>>
>>> If that is not possible, Debian users would need to download the
>>signed
>>> jar separately for use with the applet export.
>>
>>An applet is only useful for delivering an application over a network
>>to
>>a remote user. If the application is used only locally an applet
>>doesn't
>>make sense, the application could simply be packaged as a desktop
>>application.
We have (at least) one major use case where the local Freeplane applet
serves many (n*100) users in the Department of Health of Isle of Man:
http://sourceforge.net/apps/phpbb/freeplane/viewtopic.php?f=1&t=792
It would not be easy to switch this to web server(s) for them, or to
install Freeplane (in read-only mode) for each of those users.
BTW: Changes in JDK7u40 are breaking local applets, see here:
http://www.oracle.com/technetwork/java/javase/7u40-relnotes-2004172.html
http://www.duckware.com/tech/java-security-clusterfuck.html
(a Freeplane dev had to spend quite some effort to work around this)
> We're in agreement but I don't get your point: at least for Free{plane,
> Mind}, the applet is meant to be served through a web-server.
Yes, the normal use case is serving the applet using a web server.
Are you suggesting that we link to something like
http://freeplane.org/freeplaneviewer-signed.jar for all applet
instances?
I'm not sure whether this is allowed for applets. Also, this might not
work for applets in a LAN (such as in a governmental organization).
Best Regards,
--
Felix Natter
Reply to: