mardi 3 mars 2015

Java Start JNLP without paying to certificate authority?


I've noted that now it is difficult to run Java Web start files (JNLP) for Java8, without a proper certificate, due to "security reason". I've found that this a terrible decision by Oracle, breaking thousands of applications across the web space in the name of "security". I'm not willing to spend 200$ / year for certificates, since this is my hobby. And to setup Windows 8.1 to run my jar with self-signed certificate is too complicated for 90% of web users.


What is the reason for such terrible decision by Oracle? Are they afraid of lawsuits? Applications should belong to the users who write them, they should be responsible for them and their deployments, and it is up to the users to decide is it safe to run it or not. This is their decision, Oracle has little to do with this. JavWeb just provides a mechanism to run such applications. In any event, Java Web start is no much different than executing exe program from the web and running on a desktop. Java web start just makes it easier. But now it is difficult.





Aucun commentaire:

Enregistrer un commentaire