> I'm a bit put off by the wording of a certificate acceptance dialog
> asking me to OK it.
>
> The file storage and sharing website
box.net has a feature that uses a
> Java applet to allow you to drag-n-drop files from your finder onto
> their window for upload to your box on their site. When the applet
> loads you get a pretty standard-looking dialog asking you to trust a
> certificate. I was ready to give it my OK except it says:
>
> "Click Trust to run this applet and allow it unrestricted access to your
> computer. Click Don't trust to run this applet with standard Java
> restrictions."
>
> That phrase "unrestricted access" is what scares me. I wouldn't give my
> best friend unrestricted access to my computer, so I'm sure not gonna
> give it to a commercial website that specializes in file sharing! So I
> went with "don't trust" with standard Java restrictions, and the
> drag-n-drop feature did not work.
Keep in mind that any application you download and run on your Mac has
the same "unrestricted" access. If
Box.net had an application you could
download to work with their service, would you use it? Granting the
Java applet this access is exactly as safe, and as dangerous.
> 1. What is "unrestricted access" in this context?
> 2. What are "standard Java restrictions"?
