Re: Manufacturer signing A MAJOR PRPBLEM

How come there is a need for certificates in the first place?


----- Original Message -----
From: "Jliss-Viewsonics" <[email protected]>
To: <[email protected]>
Sent: Friday, January 18, 2008 8:45 PM
Subject: Re: Manufacturer signing A MAJOR PRPBLEM


> This is a problem that I have been chasing for several years. The entire
certificating setup for J2ME phones make it virtually
> impossible for smaller developers, i.e., not service provider  partners
(try jumping through those hoops) to deploy applications on
> phones and use protected classes. I have worked mostly with Motorola
phones and yes you can get certificates through MOTODEV but try
> to use them with phones from Verizon, or ATT or any other provider ! I
have had to move the majority of our company's development
> efforts to RIM Blackberry platforms as they are the only company that has
a workable certificating process that works across all
> Service Providers systems. Even there, companies like Verizon, in
particular, go ahead and disable functions paid for in the phone
> purchase, like GPS, but at least we can use the classes provided on the
phone properly. As long as the current certificate scheme is
> used it will remain unworkable for the majority of handsets on the market.
>
> Jerome
> [email protected]
>
> > -----Original Message-----
> > From: A mailing list for KVM discussion
> > [mailto:[email protected]]On Behalf Of Joe Bowbeer
> > Sent: Friday, January 18, 2008 12:30 PM
> > To: [email protected]
> > Subject: Re: Manufacturer signing
> >
> >
> > As you're probably aware, OEM signing might work for handsets bought
> > from the OEM's store, but not for the handsets sold by the operators.
> > The operators often select the root certificates that are installed on
> > their handsets.
> >
> > On Jan 18, 2008 8:03 AM, Randal Juliano wrote:
> > > Thanks Daniel for the prompt response.
> > >
> > > I'll elaborate on my issue and maybe you have other
> > > suggestions.
> > >
> > > We have developed a Java client for our service and we
> > > have successfully certified it through NSTL as a Java
> > > Certified application (3rd party signing). Our problem
> > > is that our application uses Network APIs, Sound
> > > Recording APIs and Filesystem APIs and when using them
> > > the user is prompted at least once to authorise the
> > > access.
> > >
> > > The use case for our application is a very dynamic one
> > > where the user starts the application, uses it for a
> > > quick operation and then exits it so that means that
> > > the user will be prompted every time, creating a bad
> > > user experience.
> > >
> > > Is there a way around this issue? Operator signing is
> > > a complicated path because one has to certify it with
> > > each specific operator so that's why I was considering
> > > the manufacturer route.
> > >
> > > Thanks again,
> > > Randal Pinto
> > >
> > >
> > > --- Daniel Rocha wrote:
> > >
> > > > Hi,
> > > >
> > > > Currently Nokia does not offer such a program,
> > > > unless the application is
> > > > developed under contract with the company and is
> > > > Nokia-branded. This way
> > > > we could sign it with our manufacturer certificate.
> > > >
> > > > Daniel Rocha
> > > > Forum Nokia
> > > >
> > > > -----Original Message-----
> > > > From: A mailing list for KVM discussion
> > > > [mailto:[email protected]] On Behalf Of ext
> > > > Randal Juliano
> > > > Sent: Friday, January 18, 2008 10:23 AM
> > > > To: [email protected]
> > > > Subject: Manufacturer signing
> > > >
> > > > Hi,
> > > >
> > > > Does anyone know whether Samsung and Nokia have a
> > > > similar program to
> > > > Motorola's Motodev where you can have your JavaME
> > > > application signed
> > > > with a manufacturer certificate? Any information is
> > > > appreciated.
> > > >
> > > > Regards,
> > > >
> > > > Randal Pinto
> > > >
> > > > Technical Project Manager
> > > > Shazam Entertainment Ltd.
> > > > http://www.shazam.co.uk
> > > >
> >
> >
===========================================================================
> > To unsubscribe, send email to [email protected] and include in the
body
> > of the message "signoff KVM-INTEREST".  For general help, send email to
> > [email protected] and include in the body of the message "help".
>
>
===========================================================================
> To unsubscribe, send email to [email protected] and include in the
body
> of the message "signoff KVM-INTEREST".  For general help, send email to
> [email protected] and include in the body of the message "help".

===========================================================================
To unsubscribe, send email to [email protected] and include in the body
of the message "signoff KVM-INTEREST".  For general help, send email to
[email protected] and include in the body of the message "help".