-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Aryeh Gregor wrote:
> If the applet were appropriately signed and certified, there would be
> no popup or warning to worry about.

Loading a signed and certified applet pops up a dialog box that says
roughly:

"You are loading a Java applet which is signed by XYZ. The applet will
have complete access to your computer. Do you trust the signed applet
from XYZ?"

to which the response is either going to be:

"Yes, I want to see the dancing cats!"
or
"WTF is this? Am I being hacked?!?!"

In the last three times we had this discussion, we already discarded the
idea of a Java applet uploader for this reason -- the security warnings
for signed applets are disruptive.

(Now, as an opt-in for power users, it might still be neat. But if we
can provide the same capability and *no warnings* using a Flash uploader
[with no proprietary codecs involved!], there's probably not much need
to do it in Java too. Be nice if someone could double-check if Gnash
supports file uploading. :)

- -- brion
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkkrAN4ACgkQwRnhpk1wk47jsgCbBv1BgHpZmhXaYanutuGNL0f/
4N0AoMbStv3zAYGuSBc9tw9VWqYk7M0s
=gcz3
-----END PGP SIGNATURE-----

_______________________________________________
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Reply via email to