Re: Java in Browser
- From: Arne Vajhøj <arne@xxxxxxxxxx>
- Date: Sun, 08 Mar 2009 13:51:40 -0400
Dirk Bruere at NeoPax wrote:
Arne Vajhøj wrote:Dirk Bruere at NeoPax wrote:Dirk Bruere at NeoPax wrote:Arne Vajhøj wrote:Dirk Bruere at NeoPax wrote:Arne Vajhøj wrote:Applet security sounds as a potential problem.
An unsigned applet can only access the host it is retrieved from.
You can of course sign it.
Is that a complex business?
Doing the signing: no.
Getting the users to accept giving the code privs and ensure that
they do not give all code privs can be complex.
Why an applet and not an application ?
We want a browser to be our standard control interface, with each tab becoming a particular control function.
OK. You are not the only one with that requirement.
It seems various industries are converging on that solution.
Which makes sense as everyone who uses a computer knows how to use a browser. Makes it all seem friendly:-) And Java is the perfect cross platform solution. I did initially consider using C#, but porting that to various machines would be a nightmare. Plus, we want to use Linux at some point, and the way to make it me-friendly is the browser/Java combination. With a bit of luck I won't have to know much about Linux at all...
Having said that, there is a real need for a standard Java app to be able to run in a browser tab, rather than independently. Any ideas?
That is what a Java applet does.
No. I want an app with all the access bells and whistles
The security implications are given via your requirements - a browser
is a tool to surf the untrusted internet.
Yet there is nothing in principle to bar a browser running a Java app in a tab, just like an applet, is there? Apart, that is, from the fact that nobody has implemented that feature.
An applet provides just that - a Java app running within the browser.
And if your browser supports tabs, then it can run in a tab.
But a browser is an application specifically developed to access
information on the internet.
Content on the internet can not be trusted.
So browsers and associated technologies and that includes
Java applets, Flash and JavaScript has certain security features.
For very good reasons.
If you want a browser and a Java plugin with no security, then
I guess you can get the source for Mozilla and OpenJDK and rip
out all security features.
But there will not be much interest in the result. The risk of
the user using that browser to surf the internet and a black
hat writing an applet that just wipes out the entire hard disk
is too big.
(it would actually be much worse if the applet installed a
trojan instead of just wiping out everything, but that is
besides the point)
Arne
.
- Follow-Ups:
- Re: Java in Browser
- From: Dirk Bruere at NeoPax
- Re: Java in Browser
- References:
- Java in Browser
- From: Dirk Bruere at NeoPax
- Re: Java in Browser
- From: Lew
- Re: Java in Browser
- From: Dirk Bruere at NeoPax
- Re: Java in Browser
- From: Arne Vajhøj
- Re: Java in Browser
- From: Dirk Bruere at NeoPax
- Re: Java in Browser
- From: Arne Vajhøj
- Re: Java in Browser
- From: Dirk Bruere at NeoPax
- Re: Java in Browser
- From: Arne Vajhøj
- Re: Java in Browser
- From: Dirk Bruere at NeoPax
- Re: Java in Browser
- From: Dirk Bruere at NeoPax
- Re: Java in Browser
- From: Arne Vajhøj
- Re: Java in Browser
- From: Dirk Bruere at NeoPax
- Java in Browser
- Prev by Date: Re: Java in Browser
- Next by Date: Re: Java in Browser
- Previous by thread: Re: Java in Browser
- Next by thread: Re: Java in Browser
- Index(es):
Relevant Pages
|