Difference between revisions of "JGridstart/Notes"

Revision as of 14:13, 28 April 2009

Private key (&passphrase)
- keep in memory with timeout when appropriate
- make sure it doesn't hit swap, if possible -- MEM06-C
- MSC31-J never hardcode sensitive information
- make sure it's not serializable
- Securing Java, part 1, 2 and 3.
Human Interface Guidelines
- Gnome HIG
- Apple HIG
Review certificate parameters before releasing, also by others
- CertificatePair.generateRequest(): sigAlgName, keyAlgName
- CertificatePair.generateRequest(): CSR attributes

passwords
- try again when password fails, stop after a couple of times
- show how many passwords remembered and add action to forget
- separate ui from passwordcache, implement cli
- warn properly when unsupported password on single PKCS#12 entries are found
html viewer
- on enter, go to next form element, or submit if at the end (like JEditorpane) -- upstream
- make printing margins work, document on wiki, notify mailing list

@@ Line 15: / Line 15: @@
 ==TODO==
-* password management: try again when password fails, stop after a couple of times
+* passwords
-* password management: show how many passwords remembered and add action to forget
+** try again when password fails, stop after a couple of times
-* warn properly when unsupported password on single PKCS#12 entries are found
+** show how many passwords remembered and add action to forget
+** separate ui from passwordcache, implement cli
+** warn properly when unsupported password on single PKCS#12 entries are found
+* html viewer
+** on enter, go to next form element, or submit if at the end (like JEditorpane) -- upstream
+** make printing margins work, document on wiki, notify mailing list