3 ms·
Why is a (signed, therefore running without a sandbox, nonetheless!) java applet required for three text input form fields?
by 0x0 14y ago
Why is a (signed, therefore running without a sandbox, nonetheless!) java applet required for three text input form fields?
- samuellb 14y agoBecause the applet produces a digital signature from a cryptographic key on your hard drive. This is much more secure and scalable than sending the password, see [1] and [2]. An alternative solution would be to use an SSL client certificate[3] or the WebCrypto[4] API (still under development). [1] http://security.stackexchange.com/questions/3605/certificate-based-authentication-vs-username-and-password-authentication http://security.stackexchange.com/questions/3605/certificate... [2] http://en.wikipedia.org/wiki/Public-key_infrastructure http://en.wikipedia.org/wiki/Public-key_infrastructure [3] http://www.mozilla.org/projects/security/pki/psm/help_21/glossary.html#1014561 http://www.mozilla.org/projects/security/pki/psm/help_21/glo... [4] http://www.w3.org/2012/webcrypto/WebCryptoAPI/ http://www.w3.org/2012/webcrypto/WebCryptoAPI/