> Java not running in the browser, i.e. running as a service on the target platform. Thank you for clarifying - my initial interpretation was wildly off. > Pe

> Java not running in the browser, i.e. running as a service on the target platform. Thank you for clarifying - my initial interpretation was wildly off. > Personally I am not a proponent of running Java in a browser, but I am a proponent of the JVM as a service. So please educate me on the security issues as they relate to running Java not in a browser. I'm afraid I lack the practical detail you're probably after in terms of defending or mitigating attacks against Java services. Sorry! Some of the CVEs would still seem relevant, but you'd be better off turning to them directly instead of having me poorly parrot them.