Signed Marvin Applets

Signed applets are trusted, they are allowed to access local system resources, e.g. to open or save files on local machine or to access the system's clipboard.

Signing

"Signed applet" means that the jar file that contains the applet is signed. A signed jar file can be downloaded from a standard HTTP server, just like any other jar file. However, for the signed applet to be trusted, the local system must trust the key that was used to sign the jar file. When a user encounters a signed applet, a security dialog pops up, which tells the user who signed the applet and provides four options:
  1. Grant always: If selected, the applet will be granted "AllPermission". Any signed applet that is signed using the same certificate will be trusted automatically in the future, and no security dialog will pop up again. This decision can be changed from the Java Plug-in Control Panel.
  2. Grant this session: If selected, the applet will be granted "AllPermission". Any signed applet that is signed using the same certificate will be trusted automatically within the same browser session.
  3. Deny: If selected, the applet will be granted the applicable permissions from the security policy of the Java runtime. By default, the permissions granted would be those for untrusted applets.
  4. More Info: If selected, users can examine the attributes of each certificate in the certificate chain in the jar file.

Once the user selects an option from the security dialog, the applet will be run in the corresponding security context. Note that all these decisions are determined on the fly, and no preconfiguration is required.

Our applets are signed by Thawte's Java Code Signing Certificate which uses JDK 1.3 codesigning tool.

Signed Swing applets

The Swing versions of both the MarvinSketch and MarvinView applets are signed. If you need unsigned Marvin applets, use the AWT version of the applets or unsign signed jar files (jmarvin.jar and all jar files in the sjars direcory).

Compatibility

Since signed MarvinSketch and MarvinView applets use Thawte's Java Code Signing Certificate, they work only if the client machine has version 1.3 or later of the Java Runtime Environment installed.

More details

Example

The traditional way to put the signed MarvinSketch applet (with SVG support) into a web page is by using the following HTML:

<applet CODEBASE="../.." ARCHIVE="sjmarvin.jar" CODE="MSketch" WIDTH=460 HEIGHT=380>
<strong>(YOU CANNOT SEE A JAVA APPLET HERE)</strong>
</applet>
<script LANGUAGE="JavaScript1.1" SRC="../../marvin.js"></script>
<script LANGUAGE="JavaScript1.1">
<!--
msketch_begin("../..", 460, 380); // arguments: CODEBASE, WIDTH, HEIGHT
msketch_end();
//-->
</script>