On 11/02/2011 01:53, Meetecho IETF support wrote:
Again, my point is that we are not saying you *must* install or use
anything. We're talking about providing an alternative a user *might*
want to use. I don't see any particular reason to forbid it.
Is it possible to default the offering of the applet to off?
As to the holes that may be opened up, please consider that the
source code of the applet is publicly available. Anybody can just
trust us, or go inspecting it (it is a very small piece of software
which basically takes care of media encoding/decoding and RTP
transmission).
Those of us in the ultra-security-paranoid camp will respond to this by
saying that you've offered the source code for *something*, but that (by
its very nature) we have no way of knowing that the java applet you're
serving is in fact the compiled form of the source you've presented.
Please understand, I am not in any way asserting that Meetecho would
pull this sort of bait and switch, just that there are a lot of us who
don't like running random java applets from sites that we (otherwise)
*do* know/trust. Never mind people that we don't know.
Doug (yet)
--
"We could put the whole Internet into a book."
"Too practical."
Breadth of IT experience, and depth of knowledge in the DNS.
Yours for the right price. :) http://SupersetSolutions.com/
_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/ietf