Re: Digital Signature for MIDlet?

Most of the phones (all of the ones I have worked with) have 4 protection domains for various API's. The MANUFACTURER DOMAIN can only be signed by the Manufacturer, OPERATOR DOMAIN can only be signed by the operator (Service Provider), TRUSTED 3RD PARTY, this can use the Verisign or Thawte signatures, and UNTRUSTED which require no signature. I have found that only the MANUFACTURER domain consistently provides access to the functions on the phone, such as SD card access. Even the OPERATOR domain accesses only a limited subset of features.
This is somewhat documented in the development info for the various phones, but which features require which domains is often unclear.

Jerome
[email protected]

> -----Original Message-----
> From: A mailing list for KVM discussion
> [mailto:[email protected]]On Behalf Of
> [email protected]
> Sent: Monday, August 06, 2007 11:05 PM
> To: [email protected]
> Subject: Re: Digital Signature for MIDlet?
> 
> 
> Actually, that step matters, but one thing you have to be careful about is that with most of the recent cell phones, the 
> phone firmware is customized for the carrier to explicitly reject any application not signed with the carrier's 
> certificates. I've done extensive research with vanilla phones purchased from T-Mobile (in the US), Sprint and Cingular 
> and in every case my MIDlet (signed with a Thawte certificate that was purportedly installed in the phone already) failed 
> the security check while installing. This failure occured regardless of how the MIDlet was signed or whether or not the 
> phone was unlocked. However, when I went out and bought an unbranded handset ($200 from the Nokia store in NYC: no 
> carrier-specific settings of any kind) and my MIDlet installs smoothly, grants me all the requested permissions and in 
> general does all the wonderful things promised by the J2ME spec. You might be running up against this limitation, so 
> before you decide your code signing technique is broken, you might want to look at getting a completely stock firmware 
> phone and testing your MIDlet on that.
> [Message sent by forum member 'blackbuddha' (blackbuddha)]
> 
> http://forums.java.net/jive/thread.jspa?messageID=229769
> 
> ===========================================================================
> To unsubscribe, send email to [email protected] and include in the body
> of the message "signoff KVM-INTEREST".  For general help, send email to
> [email protected] and include in the body of the message "help".
> 

===========================================================================
To unsubscribe, send email to [email protected] and include in the body
of the message "signoff KVM-INTEREST".  For general help, send email to
[email protected] and include in the body of the message "help".