Re: Manufacturer signing

Hi Randal,

Let me confirm Daniel's response as I have been researching these issues
for my forthcoming security domain presentation in Java ME Developer Day
in Santa Clara.
https://developerdays.dev.java.net/

The application has to be either developed by/for Nokia or
Nokia-branded. There is no way around this requirement.

The suggestion I have that you instruct the users how to change the
default permission settings to "Always allowed". Not optimal solution, I
agree.

FWIW
For the presentation I also asked some comments from Motorola and Sony
Ericsson. I did not have a contact for Samsung, so no information for
them, I am afraid.

Motorola
Manufacturer signing requires valid Partner Agreement to be in place.
See http://developer.motorola.com for the requirements to become a
partner.

Sony Ericsson
Manufacturer signing requires MIDlet to be Sony Ericsson owned or
licensed

best regards
Hartti Suomela
Forum Nokia

PS. in case anyone is interested in more detailed information about
security domain implementations and with various carriers, please check
http://wiki.forum.nokia.com/index.php/Java_Security_Domains

-----Original Message-----
From: A mailing list for KVM discussion
[mailto:[email protected]] On Behalf Of ext Randal Juliano
Sent: Friday, January 18, 2008 8:03 AM
To: [email protected]
Subject: Re: Manufacturer signing

Thanks Daniel for the prompt response.

I'll elaborate on my issue and maybe you have other suggestions.

We have developed a Java client for our service and we have successfully
certified it through NSTL as a Java Certified application (3rd party
signing). Our problem is that our application uses Network APIs, Sound
Recording APIs and Filesystem APIs and when using them the user is
prompted at least once to authorise the access. 

The use case for our application is a very dynamic one where the user
starts the application, uses it for a quick operation and then exits it
so that means that the user will be prompted every time, creating a bad
user experience. 

Is there a way around this issue? Operator signing is a complicated path
because one has to certify it with each specific operator so that's why
I was considering the manufacturer route.

Thanks again,
Randal Pinto

--- Daniel Rocha <[email protected]> wrote:

> Hi,
> 
> Currently Nokia does not offer such a program, unless the application 
> is developed under contract with the company and is Nokia-branded. 
> This way we could sign it with our manufacturer certificate.
> 
> Daniel Rocha
> Forum Nokia
> 
> -----Original Message-----
> From: A mailing list for KVM discussion 
> [mailto:[email protected]] On Behalf Of ext Randal Juliano
> Sent: Friday, January 18, 2008 10:23 AM
> To: [email protected]
> Subject: Manufacturer signing
> 
> Hi,
> 
> Does anyone know whether Samsung and Nokia have a similar program to 
> Motorola's Motodev where you can have your JavaME application signed 
> with a manufacturer certificate? Any information is appreciated.
> 
> Regards,
> 
> Randal Pinto
> 
> Technical Project Manager
> Shazam Entertainment Ltd.
> http://www.shazam.co.uk
> 
> 
> 
>  
>
________________________________________________________________________
> ____________
> Looking for last minute shopping deals?  
> Find them fast with Yahoo! Search.
>
http://tools.search.yahoo.com/newsearch/category.php?category=shopping
> 
>
========================================================================
> ===
> To unsubscribe, send email to [email protected] and include in the

> body of the message "signoff KVM-INTEREST".  For general help, send 
> email to [email protected] and include in the body of the message 
> "help".
> 
>
========================================================================
===
> To unsubscribe, send email to [email protected] and include in the

> body of the message "signoff KVM-INTEREST".  For general help, send 
> email to [email protected] and include in the body of the message 
> "help".
> 



 
________________________________________________________________________
____________
Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ 

========================================================================
===
To unsubscribe, send email to [email protected] and include in the
body
of the message "signoff KVM-INTEREST".  For general help, send email to
[email protected] and include in the body of the message "help".

===========================================================================
To unsubscribe, send email to [email protected] and include in the body
of the message "signoff KVM-INTEREST".  For general help, send email to
[email protected] and include in the body of the message "help".