On 2012-10-27 01:02, Brian Carlstrom wrote:
> lol, I think that was supposed to apply to
> 
> http://developer.android.com/reference/java/lang/SecurityManager.html
> 
> "Legacy security code; do not use.
> 
> Security managers do not provide a secure environment for executing
> untrusted code. Untrusted code cannot be safely isolated within the
> Dalvik VM."

Thanx Brian, you made my day!

I would appreciate an enhanced documentation of the crypto platform because
currently it seems that you need to look into the source in order to get a clear
picture.  I still haven't much of a clue on how "KeyChain" and "JCE" play 
together
or how you can generate keys for usage by "KeyChain".

Regards,
Anders

> 
> since it was from this change
> 
> Author: Elliott Hughes <[email protected]>
> Date:   Thu Jan 6 18:13:31 2011 -0800
> 
>     Retire SecurityManager.
> 
>     This change removes all the code that was calling getSecurityManager, and
>     removes all use of AccessController.doPrivileged. It also changes the
>     implementation of AccessController so it doesn't actually do anything; 
> it's
>     only there for source-level compatibility.
> 
>     Bug: 2585285
>     Change-Id: I1f0295a4f12bce0316d8073011d8593fee116f71
> 
> -bri
> 
> On Fri, Oct 26, 2012 at 3:24 PM, Anders Rundgren
> <[email protected]> wrote:
>> http://developer.android.com/reference/java/security/package-summary.html
>>
>> As of 2012-10-07 the page begins with:
>>
>>   "package java.security
>>    This package is for compatibility with legacy code only, and should not 
>> be used or expected to do anything useful."
>>
>>
>> Where is the recommended API that one can expect does something useful?
>>
>> Anders
>>
>> --
>> You received this message because you are subscribed to the Google Groups 
>> "Android Security Discussions" group.
>> To post to this group, send email to 
>> [email protected].
>> To unsubscribe from this group, send email to 
>> [email protected].
>> For more options, visit this group at 
>> http://groups.google.com/group/android-security-discuss?hl=en.
>>
> 

-- 
You received this message because you are subscribed to the Google Groups 
"Android Security Discussions" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/android-security-discuss?hl=en.

Reply via email to