how to deny additional privileges on a secure site
Mikael Jokela
Mikael.Jokela@cs.helsinki.fi
Fri, 15 Nov 2002 14:33:24 +0200
Hi,
I'd like to place the unsigned Mindterm applet on a secure
site so that users can securely use the applet with any
SSL/Java-capable browser. I don't want to use any signed
appled because they require a specific browser. Neither
I want to give the applet any additional privileges, just
to connect with SSH back to the originating server.
However, I have found this problematic. It looks like
the unsigned applet requests additional privileges when
it is downloaded with HTTPS. Most browsers ignore this
but Netscape 4.79 (Linux), at least, shows multiple
windows saying that "Java applet from -- is requesting
additional privileges". This does NOT happen if I use
a plain HTTP URL to access the same web page where the
applet is located!
So, how do I tell the Mindterm applet never to request
additional privileges? Is there another way to circumvent
this problem?
I have Mindterm version 2.1 (non-commercial).
Kind regards,
Mikael Jokela