For my application I was hoping for something more secure but I can
adapt what I have and it should work. KeyStore access usually unless
you intentionally simplify it allows for both a password for the file
and each alias. So while I would hope for something more secure than
default this actually weakens it. Oh well.
I don't see how using a KeyStore would necessarily weaken anything.
Not using a keystore. You can have a strong crypto password. But to
simplify it to a single password is less secure than a file password
+ a unique password per alias. More all your eggs in one basket.
Figure out the one password and you have the works. It could be a
lame single password, easily susceptible to dictionary attack, then
the strong crypto doesn't necessarily matter, etc.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Java-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/java-dev/email@hidden
This email sent to email@hidden
