Difference between revisions of "JGridstart/Notes"

From PDP/Grid Wiki
Jump to navigationJump to search
(add things to review)
Line 10: Line 10:
 
** [http://library.gnome.org/devel/hig-book/stable/ Gnome HIG]
 
** [http://library.gnome.org/devel/hig-book/stable/ Gnome HIG]
 
** [http://developer.apple.com/documentation/userexperience/Conceptual/AppleHIGuidelines/ Apple HIG]
 
** [http://developer.apple.com/documentation/userexperience/Conceptual/AppleHIGuidelines/ Apple HIG]
 
+
* Review certificate parameters before releasing, also by others
 +
** CertificatePair.generateRequest(): sigAlgName, keyAlgName
 +
** CertificatePair.generateRequest(): CSR attributes
  
 
==TODO==
 
==TODO==

Revision as of 08:59, 16 April 2009

some notes on User:Wvengen@nikhef.nl/JGridStart

  • Private key (&passphrase)
    • keep in memory with timeout when appropriate
    • make sure it doesn't hit swap, if possible -- MEM06-C
    • MSC31-J never hardcode sensitive information
    • make sure it's not serializable
    • Securing Java, part 1, 2 and 3.
  • Human Interface Guidelines
  • Review certificate parameters before releasing, also by others
    • CertificatePair.generateRequest(): sigAlgName, keyAlgName
    • CertificatePair.generateRequest(): CSR attributes

TODO

  • password management: try again when password fails, stop after a couple of times
  • password management: show how many passwords remembered and add action to forget
  • warn properly when unsupported password on single PKCS#12 entries are found