Re: Availability of a Signed Version of postgresql.jar

From: Kris Jurka <books(at)ejurka(dot)com>
To: "Dario V(dot) Fassi" <software(at)sistemat(dot)com(dot)ar>
Cc: pgsql-jdbc(at)postgresql(dot)org
Subject: Re: Availability of a Signed Version of postgresql.jar
Date: 2004-07-08 21:37:39
Message-ID: Pine.BSO.4.56.0407081631120.29683@leary.csoft.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-jdbc

On Thu, 8 Jul 2004, Dario V. Fassi wrote:

> It's available a Signed Version of postgresql.jar ?
>

No, but why would you want one? As I understand it signed jar files are
only useful in a sandboxed environment where access to protected resources
is desired. The postgresql jar file itself is useless without an
application calling it so the application should include the
postgresql.jar file and be signed, not the pg jar file.

Further as the driver is maintained by unrelated volunteers there are
problems because no one individual is in charge of producing the jar
files and there is no certificate chain available from someone like
Verisign.

Kris Jurka

In response to

Responses

Browse pgsql-jdbc by date

  From Date Subject
Next Message Dario V. Fassi 2004-07-08 23:58:42 Re: Availability of a Signed Version of postgresql.jar
Previous Message Bill Chandler 2004-07-08 20:49:21 Re: Terrible performance after deleting/recreating indexes