Java Plug-in Security

Print-friendly Version

PLUG-IN SECURITY
Java Plug-in Home Page | Deploying RSA Signed Applets
Other Java Plug-in Documentation

Basic Security Model

Java Plug-in supports the standard Java 2 SDK, Standard Edition v 1.3 security model. This means that:

		All applets are run under the standard applet security manager. This prevents untrusted applets from performing potentially dangerous operations, such as reading local files. See the Java Security FAQ for details on the restrictions on applets.
		Signed applets are allowed full access to the local system. See Deploying RSA Signed Applets for details on how to use signed applets with Java Plug-in.

HTTP and HTTPS

Java Plug-in uses its own HTTP code to download applets and to make any other necessary connections.

Java Plug-in 1.3 adds support for HTTPS using the browser's own HTTPS implementation.

Certificates, Keys, etc.

Java Plug-in attempts to run applets in an identical way in both Netscape Navigator and Internet Explorer by avoiding using browser-specific resources.

Java Plug-in 1.3 adds new support for RSA signed applets which removes the need to distribute an identitydb.obj file to client machines.