FW: Digital Signature for MIDlet?

Ah, if only the problem were so simple. I have been developing phone apps for 8 years and the signing problem is a nightmare for
developers ! Not only do the manufacturers require signing but so do many carriers (in the US at least). The really maddening
problem is that every time a change is made in the applet, no matter how minor, a new signature must be created. This requires
resubmitting the application through Java verified (for a FEE) and / or through the manufacturer ( like Motorola). Sometimes
through both. Oh yeh, if you are deploying your application on a different phone model you will probably need to resubmit it to Java
Verified. They have a very incomplete list of phone groups that the certificate s work across, but figure that you will need to
resubmit for each phone model, at an extra charge of course !  I have asked people at Motorola if developers could get a few
unrestricted phones ( I was trying for some of the RAZR's) to test on before going through signing hell. They said it was a good
idea but never followed up. As a result we are now focusing our serious business applications on RIM's Blackberry platform. They
have the only consistent and effective certificate procedure I have found. The developer purchases a certificate from RIM. The RIM
IDE manages code signing for the API's that require it for deployment. The certificate works across all Blackberry phones and
Carriers. It can be used an almost unlimited number of times. They make it simple and logical and can still monitor malicious usage.
It's a pity that we developers are hit with such restrictions. The newer phones are extremely powerful hand held computers but are
being severely limited both by the manufacturers as well as carriers (mostly U.S.). As a result we see lots of games but serious
applications on phones are limited. The only open channels currently are the iDEN series of phones from Motorola and RIM'S
Blackberry's which have the ONLY intelligent CERTIFICATE MANAGEMENT SCHEME in production

Jerome
[email protected]
tel.: 215-635-3980
fax.: 215-821-1029


> -----Original Message-----
> From: A mailing list for KVM discussion
> [mailto:[email protected]]On Behalf Of
> [email protected]
> Sent: Friday, July 27, 2007 7:31 AM
> To: [email protected]
> Subject: Re: Digital Signature for MIDlet?
>
>
> Chris,
>
> Good input. As I mentioned I am working on establishing a channel into Java Verified to allow the developers here in the
> community (and elsewhere) to get that feedback in. I know Java Verified is aware of some of the deficiencies.
>
> I'll post a message when that channel is established. My hope is that the community will be able to raise the urgency of
> a solution.
>
> -- Terrence
> [Message sent by forum member 'terrencebarr' (terrencebarr)]
>
> http://forums.java.net/jive/thread.jspa?messageID=228505
>
> ===========================================================================
> To unsubscribe, send email to [email protected] and include in the body
> of the message "signoff KVM-INTEREST".  For general help, send email to
> [email protected] and include in the body of the message "help".
>

===========================================================================
To unsubscribe, send email to [email protected] and include in the body
of the message "signoff KVM-INTEREST".  For general help, send email to
[email protected] and include in the body of the message "help".