Re: Status of the Java Port?

Dustin,

Since I've been having a look at the Java port lately, I can probably 
talk a little to this from a "new guy" perspective.

The Java port is currently well structured into different projects 
within the one CVS module:
* PasswordSafeLib - which houses a very nice API to the PasswordSafe 
file format. Has its own Ant build setup, Javadoc, etc.
* PasswordSafeJ - which is a Swing app that provides the GUI for 
interacting with the API from PasswordSafeLib

For my SWT GUI, I'm using PasswordSafeLib as is, and just writing my own 
GUI layer.

For your N-Tier solution, I'd be thinking about creating a new 
"PasswordSafeJWeb" or similar top-level directory to house your 
Applet/Servlet/Struts/whatever code (tiers 1 & 2), and just reusing the 
existing PasswordSafeLib to do the dirty work password related storage 
and editing (eg. saving/loading/editing/updating safes).

So, I wouldn't see the need to fork. You probably just need to create a 
new presentation layer for the web in it's own project directory. Sounds 
exciting!

Just my $0.02,

Glen.
 


Cyrus242 wrote:

> Hi,
>
> I'm sorry. I guess my choice of words 'failed' in conveying my 
> meaning. I have been using Password Safe and will continue doing so. I 
> definitely want to take a look at the java port that has been done. 
> The only problem I fear is the format its currently in: We will have 
> to look at doing what's known as a 3-Tier application. Should we look 
> at taking the java port in this direction or make a project fork?
>
> -Dustin Eric Venegas
>
> Rony Shapiro wrote:
>
>> Hi,
>>
>> I don't think that PasswordSafe has "failed" by any reasonable 
>> definition of
>> the term. It does what it was designed to do quite well, and I am not 
>> aware
>> of any breaches in the security or cryptography (note that the terms 
>> are not
>> synonymous). But then again, I may be a bit biased :-)
>>
>> If you're interested in a Java port, the CVS repository has some work 
>> that
>> was done a while ago that might serve as the basis for a downloadable
>> applet.
>>
>>     Cheers,
>>
>>         Rony
>>
>> ________________________________
>>
>>     From: [email protected]
>> [mailto:[email protected]] On Behalf Of
>> Cyrus242
>>     Sent: Monday, May 02, 2005 12:42 AM
>>     To: [email protected]
>>     Subject: Re: [Passwordsafe-devel] Status of the Java Port?
>>     
>>     
>>
>>
>>     Greg Thomas wrote:
>>         On 5/1/05, Cyrus242 <[email protected]>
>> <mailto:[email protected]>  wrote:
>>          
>>             my group would be interested in talking about why
>> this password
>>             safe has failed and what can be done to make a
>> better one.
>>                
>>        
>>         FWIW, I don't think PS has "failed". Time has moved on, and
>> it is
>>         perhaps not quite as secure as it could be. That said, I
>> consider if
>>         safe enough. OK, it may not be good enough for state
>> secrets, but it
>>         will keep my online banking details out of Joe Hackers
>> hands.
>>        
>>         Either way, it's nothing that a couple of new encryption
>> routines
>>         wouldn't solve.
>>        
>>          
>>                     I do not think C++ is a candidate
>> language as none of us know it. C# and
>>             JAVA seem likely candidates as well as a possibility
>> for PHP or another
>>             web based language. I am personally pushing for Java
>> or C#.
>>                
>>        
>>         PHP etc. are (generally) server side languages. That's no
>> good, unless
>>         you can trust your server 100%, which most people can't. If
>> you want a
>>         WWW based solution, I think the only option would be a Java
>> applet
>>         that uploads/downloads the encrypted file to the server, and
>> decrypts
>>         it locally. You can digitally sign the applet so you know it
>> hasn't
>>         been tampered with.
>>        
>>         Greg
>>        
>>          
>>     PHP or another simple solution would be done only if time
>> constraints are put in place beyond our control. A java applet did 
>> pass by
>> my mind as a solution. Again though, I would personally prefer to use 
>> Java
>> or C# to have a 'password safe' with proper security measures.
>>
>>
>>
>> -------------------------------------------------------
>> This SF.Net email is sponsored by: NEC IT Guy Games.
>> Get your fingers limbered up and give it your best shot. 4 great 
>> events, 4
>> opportunities to win big! Highest score wins.NEC IT Guy Games. Play to
>> win an NEC 61 plasma display. Visit http://www.necitguy.com/?r=20
>> _______________________________________________
>> Passwordsafe-devel mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/passwordsafe-devel
>>
>>  
>>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: NEC IT Guy Games.
> Get your fingers limbered up and give it your best shot. 4 great 
> events, 4
> opportunities to win big! Highest score wins.NEC IT Guy Games. Play to
> win an NEC 61 plasma display. Visit http://www.necitguy.com/?r=20
> _______________________________________________
> Passwordsafe-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/passwordsafe-devel




-------------------------------------------------------
This SF.Net email is sponsored by: NEC IT Guy Games.
Get your fingers limbered up and give it your best shot. 4 great events, 4
opportunities to win big! Highest score wins.NEC IT Guy Games. Play to
win an NEC 61 plasma display. Visit http://www.necitguy.com/?r=20