JGridstart/Notes

Private key (&passphrase)
- keep in memory with timeout when appropriate
- make sure it doesn't hit swap, if possible -- MEM06-C
- MSC31-J never hardcode sensitive information
- make sure it's not serializable
- Securing Java, part 1, 2 and 3.
Human Interface Guidelines
- Gnome HIG
- Apple HIG
Review certificate parameters before releasing, also by others
- CertificatePair.generateRequest(): sigAlgName, keyAlgName
- CertificatePair.generateRequest(): CSR attributes

TODO

passwords
- try again when password fails, stop after a couple of times
- show how many passwords remembered and add action to forget
- separate ui from passwordcache, implement cli
- warn properly when unsupported password on single PKCS#12 entries are found
html viewer
- on enter, go to next form element, or submit if at the end (like JEditorpane) -- upstream
- make printing margins work, document on wiki, notify mailing list
gui
- make show/hide certificate list work on Java 1.5 and below
- concurrency !!
- [bug] selecting certificate in menu doesn't update certificatelist when an invalid certificate is present but it is not the last certificate
- [bug] certificate list becomes empty after refresh when a certificate is removed from disk
- [bug] no level radiobutton in request wizard (second page) is selected when visiting the page for a second time after prev/next

Make estimated guess for some request form fields
- Organisation: ip-address, emailaddress (specify in organisations.conf)
- Country: GeoIP
- Name: from system user
- Certification level: detect demo/tutorial from hostname/ip-range/systemname/...