[fyi][icedtea7] windows builds

[Omair Majid]

Hi,

On 07/29/2013 03:16 PM, Jacob Wisor wrote:
> "Omair Majid"<omajid at xxxxxxxxxx> wrote:
>> Do you mean verification of signed jars? That's definitely
>> implemented in icedtea-web and works on Linux.
> 
> Yes, this is what I have meant. But of course, I may be wrong.

We try very hard to make sure security mechanisms are in place and
unsigned applications are sandboxed properly and signed applications are
allowed to run with correct permissions. Last time I checked (approx 1
year ago) this was working. If this is broken, please yell loudly at the
developers.

If you think there's a security flaw, please let us know (privately) so
we can fix it and get a release out ASAP.

> That is at least the information I read in the documentation.

This documentation must be very out-of-date. Do you have a link to it?
If it's possible to fix it, I will be happy to do so.

> Generally speaking, there is quite a bit of Linux specific code in
> IcedTea-Web. But, this is not surprising, since it is primarily being
> developed on Linux for Linux systems, which is okay. I have also
> experienced similar coding style with products that though are
> developed in Java, are primarily developed on Windows and for Windows
> systems.

Most of the developers are using Linux. If you want to propose patches
for Windows, we will be happy to accept them. I will admit, though, that
we do tend to ignore non-posix operating systems in icedtea-web.

Thanks,
Omair