Confusion on Applet Security

[suekar meredilko]

Pls. confirm.


a)Can an applet (signed or unsigned) make a connection to other machines besides the host if its policy file allows it. Assume it running in a browser and not applet viewer (i.e. code base is not local)

b) Can an applet make write to local files if its policy file allows it. Does it still have to be signed. Assume it running in a browser and not applet viewer. i.e. code base is not local

Is there any exception to signed applets. i.e. irrespective of signing only policy files takes precedence

[Maheedhar]

Originally posted by suekar meredilko:
Pls. confirm.

b) Can an applet make write to local files if its policy file allows it. Does it still have to be signed. Assume it running in a browser and not applet viewer. i.e. code base is not local

Is there any exception to signed applets. i.e. irrespective of signing only policy files takes precedence

Applets can write to the local files, if the policy file allows. However, if the policy file requires the applet codesource to be signed, obviously applet should be a signed one.