Re: VerifyingProxyPreparer versus BasicProxyPreparer
Mark Brouwer <[email protected]>
| Newsgroups | gmane.comp.java.sun.jini |
|---|---|
| Message-ID | <[email protected]> |
Bob Scheifler wrote: >> I'm rather >> curious about the reason for the existence of VerifyingProxyPreparer, >> as that one seems to take a different approach compared to >> BasicProxyPreparer (you have to pass in "trust verifier context >> elements"). > > VerifyingProxyPreparer was added late (2.1), as part of a security fix. > It was introduced primarily to make it easy to specify context elements > in configuration files; the specific context element that got introduced > at the same time being BasicUntrustedObjectSecurityContext. A second > feature addition over BasicProxyPreparer is the ability to control > the class loader used to find trust verifiers. Thanks it all makes sense. If you want to mimic one aspect of the behavior of BasicProxyPreparer, namely the fact that you don't want to perform proxy trust verification do you envision a trust verifier context element that just trusts whatever is passed in. -- Mark -------------------------------------------------------------------------- Getting Started: http://www.jini.org/wiki/Category:Getting_Started Community Web Site: http://jini.org jini-users Archive: http://archives.java.sun.com/archives/jini-users.html Unsubscribing: email "signoff JINI-USERS" to [email protected]