Date: Fri, 31 Jan 1997 15:27:19 -0800
Message-Id: <199701312327.PAA20805@puffin.eng.sun.com>
From: Marianne Mueller <mrm@Eng>
To: mao@lava.de
Subject: Re: protocols&security
If you modify one of the system classes, that's the same as changing
the security implementation of the applet execution environment.
I wouldn't say that the applet security manager encapsulates the
entire applet security model. It performs most of the dynamic runtime
checks but there are other aspects of the java runtime (like applets
not being able to replace system classes) that the security model
relies on.
Does that make sense? So if you replace a system class and the
security manager doesn't complain, that's *not* the same as running in
the standard applet security environment.
Marianne