RE: And DCO too {was- [Fed-Talk] AKO/DKO and Safari 4 (UNCLASSIFIED)
RE: And DCO too {was- [Fed-Talk] AKO/DKO and Safari 4 (UNCLASSIFIED)
- Subject: RE: And DCO too {was- [Fed-Talk] AKO/DKO and Safari 4 (UNCLASSIFIED)
- From: "Beck, Keith M CDR ACNO NGEN, OPNAV N099" <email@hidden>
- Date: Fri, 12 Jun 2009 17:11:33 -0400
- Thread-topic: And DCO too {was- [Fed-Talk] AKO/DKO and Safari 4 (UNCLASSIFIED)
There are two other show stoppers with DCO.
-The Java applet was signed with a code signing certificate that isn't
in your (or anyone's chain of trust).
-The Java applet has an expired signature (20 Oct 2008).
The Java applet also shuts off the sandbox, but that just generates an
alert and doesn't prevent code execution. The funny catch-22 here is
that I believe any certified public key infrastructure solution should
prevent that app from running. That IE just generates a warning most
users click through without inspecting is a security failure in my book.
Even if you signed into the DCO portal with your CAC, currently DCO asks
for your user name and password for an individual meeting anyway.
If it's any consolation, I've got two tickets with the NCES help desk on
DCO CAC logon. This Summer, they should switch to a new mechanism and
get rid of their Java applet.
Keith
-----Original Message-----
From: Polich, George Mr CIV USA OSA [mailto:email@hidden]
Sent: Friday, June 12, 2009 10:43
To: 'Basil Decina'; 'Fed Talk'
Subject: And DCO too {was- [Fed-Talk] AKO/DKO and Safari 4
(UNCLASSIFIED)
Classification: UNCLASSIFIED
Caveats: NONE
Who has working experience with DCO (Defense Connect Online [part of
DKO])?
I recently became a non-resident student at the Army War College. Part
of
my seminar participation will be via DCO.
I am having no success (from my home workstation) with fully
connecting to
DCO -- although DCO is an Adobe(tm) service/app and the DCO
"requirements"
document lists compatibility with Apple (both 10.4 and 10.5) and Safari
and
FF. I have a fully up-to-date 10.5, safari 4 and latest updated stable
FF
(not the RC beta).
I can login to DCO, but must do so via the alternative "simple
sign-in"
because the Java applet for the sign-in does not load. I have checked
that
the Mac OS is up-to-date; and I have downloaded and installed the two
Adobe
plugins/addons from the DCO site. Using the DCO "test" link: the 1st
item
"compatible flash player" passes. 2nd item "connecting to Adobe Connect
Server" fails. (There are two more test points, but I never get there.)
At one point I reasoned that possibly my router firewall may not be
passing
traffic. However, if I start "Virtualbox" running Win XP, IE 6 on that
same
workstation, IE 6 successfully passes all 4 test points. And, it is also
getting its traffic through that same router.
I'll take any and all possible troubleshooting suggestions and hints.
~~
George Polich
Army Public Affairs Center
-----Original Message-----
From: fed-talk-bounces+george.polich=email@hidden
[mailto:fed-talk-bounces+george.polich=email@hidden] On
Behalf Of Basil Decina
Sent: Friday, June 12, 2009 9:52 AM
To: Fed Talk
Subject: Re: [Fed-Talk] AKO/DKO and Safari 4
Boy, this is an active thread --- almost 20 posts in less than 12
hours !
You would almost think that there are MacOS Safari users who rely on
AKO/DKO and can't get their issues resolved by either the Army (who
are supposed to be promoting standards, not proprietary solutions) or
Apple (who, as "#2", needs to try harder and bring at least some of
ActiveX into Safari --- or at least have one Apple Safari developer
with a CAC who can work with the AKO contractor to come up with work-
arounds). But I digress...
The two main problems I've had which have forced me to abandon Safari
(and Firefox) and use IE under Windows, are:
1) Safari doesn't let one access the Sponsor Management pages.
One
needs to log via a CAC to sponsor and approve accounts (which is
reasonable) but for some reason (ActiveX ?) those subpages do not
appear under Safari. (If one clicks on SMC under "My Accounts/
Sponosor Management", one gets a "Please Wait" spinner that never
loads.) I might be able to get to work with FireFox and CoolKey but
I'm trying to be "Apple pure" and not load another CAC management
package (except for those two little non-Apple add-ons called VMware
Fusion and Windows :-)
2) The other major problem is that if one views any group or set
of
files that can only display so many items in a list, and therefore
creates "Page n of m" type navigation, one cannot navigate. One sees
the first page but gets a "Please Wait" spinner that never loads.
The above is actually worse under Safari 4 (and I've been
running 4
since it first came out in Beta).
Now that we find there are Safari users who can't access
AKO/DKO,
should we start a thread on DTS and DBsign ? (No, please... This is
a joke.)
Basil
On Jun 11, 2009, at 7:53 PM, William Cerniuk wrote:
> You build it to standards and make allowances for non-standard
> browsers or bugs in browsers.
><< >>
Classification: UNCLASSIFIED
Caveats: NONE
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden