Difference between revisions of "JGridstart/Notes"

Revision as of 10:59, 16 April 2009

Private key (&passphrase)
- keep in memory with timeout when appropriate
- make sure it doesn't hit swap, if possible -- MEM06-C
- MSC31-J never hardcode sensitive information
- make sure it's not serializable
- Securing Java, part 1, 2 and 3.
Human Interface Guidelines
- Gnome HIG
- Apple HIG
Review certificate parameters before releasing, also by others
- CertificatePair.generateRequest(): sigAlgName, keyAlgName
- CertificatePair.generateRequest(): CSR attributes

password management: try again when password fails, stop after a couple of times
password management: show how many passwords remembered and add action to forget
warn properly when unsupported password on single PKCS#12 entries are found

@@ Line 10: / Line 10: @@
 ** [http://library.gnome.org/devel/hig-book/stable/ Gnome HIG]
 ** [http://developer.apple.com/documentation/userexperience/Conceptual/AppleHIGuidelines/ Apple HIG]
+* Review certificate parameters before releasing, also by others
+** CertificatePair.generateRequest(): sigAlgName, keyAlgName
+** CertificatePair.generateRequest(): CSR attributes
 ==TODO==