Are You Ready for the Next Java SE Update?
By Tori Wieldt on Nov 18, 2013
Oracle has created two new resources, the Java RIA Security Checklist and the Java Security Resource Center to help you prepare for the next Java SE update, Java SE 7 update 51 (scheduled for January 2014). This release changes the deployment requirements for Applet & Web Start applications with two new requirements:
- Use of the Permissions Manifest attribute
- Valid code signatures.
These changes will not affect developers of back-end or client applications; the scope is limited only to Java Applets & Web Start Applications (RIAs). Read details in the blog New security requirements for RIAs in 7u51.
Java RIA Security Checklist
The changes scheduled for Java 7 update 51 means the default security slider will require Code Signatures and the Permissions Manifest attribute. Java RIA Security Checklist provides best practices to help development teams track work necessary to accommodate user prompts.
Security Resource Center
Oracle has launched a new Java Security Resource Center to aggregate security-related information for the Java community based on your role: developer, system administrator, home user, or security professional.
Additional Resources
- Java Platform Group Product Management blog – Provides information, best practices, and examples on topics related to Java SE, security, and usability .
- Java SE 7 Security Documentation
- Java Tutorial for Signing Code
- Jar File Manifest Attributes for Security
