# Re: JDK 1.1.1 Security Flaw Question?

Vijay Srinivasan (Vijay.Srinivasan@Eng)
Wed, 7 May 1997 08:21:58 -0700

- Messages sorted by: [ date ][ thread ][ subject ][ author ]
- Next message: Paul Waserbrot: "When JCE???"
- Previous message: Carroll Moore: "JDK 1.1.1 Security Flaw Question?"
- Maybe in reply to: Carroll Moore: "JDK 1.1.1 Security Flaw Question?"
- Next in thread: Marianne Mueller: "Re: JDK 1.1.1 Security Flaw Question?"

    Date: Wed, 7 May 1997 08:21:58 -0700

    From: Vijay.Srinivasan@Eng (Vijay Srinivasan)

    Message-Id: <199705071521.IAA09898@thought.eng.sun.com>

    To: cmoore@ghg.net

    Subject: Re: JDK 1.1.1 Security Flaw Question?

That was the flaw in 1.1.1. Code with signature NOT in your set of trusted
signatures COULD still run by assuming the identity of a trusted identity.
However this has been fixed in 1.1.2 and is not possible anymore.

Vijay

- Next message: Paul Waserbrot: "When JCE???"
- Previous message: Carroll Moore: "JDK 1.1.1 Security Flaw Question?"
- Maybe in reply to: Carroll Moore: "JDK 1.1.1 Security Flaw Question?"
- Next in thread: Marianne Mueller: "Re: JDK 1.1.1 Security Flaw Question?"