Re: Signed Applications for AT&T

On 10/5/07, Alan Weiler wrote:
> Hello All,
>
> I understand that for Sprint, a signed application with a certificate will
> only work if the application is to be served from Sprint's deck.  All off-
> deck applications must be delivered unsigned, triggering the dialog that
> the application is untrusted.
>
> Is this also the case for AT&T (Cingular)?  For AT&T, customers, can I sign
> my applications with a certificate and deliver them to the public from my
> off-deck server?  Any way to avoid triggering the "untrusted, unsigned"
> prompt on AT&T phones?
>
> Thank you for your reply.
>
> Alan Weiler
> [email protected]
>

For AT&T, signing MIDlets yourself is viable.  That said, there's no
single certificate that will work on all handsets -- and some handsets
won't accept any of your certificates (Motorola in particular).

Here's a reference from Nokia, with pointers to more information on
the AT&T developer site:

http://wiki.forum.nokia.com/index.php/Java_Security_Domains
 http://wiki.forum.nokia.com/index.php/AT%26T_Java_security_domains

In addition to the official policy, you need to consider that some of
your users may be (legally) using unlocked or gray market handsets.

--
Joe Bowbeer

===========================================================================
To unsubscribe, send email to [email protected] and include in the body
of the message "signoff KVM-INTEREST".  For general help, send email to
[email protected] and include in the body of the message "help".