On 11/02/2011 01:53, Meetecho IETF support wrote: > Again, my point is that we are not saying you *must* install or use > anything. We're talking about providing an alternative a user *might* > want to use. I don't see any particular reason to forbid it. Is it possible to default the offering of the applet to off? > As to the holes that may be opened up, please consider that the > source code of the applet is publicly available. Anybody can just > trust us, or go inspecting it (it is a very small piece of software > which basically takes care of media encoding/decoding and RTP > transmission). Those of us in the ultra-security-paranoid camp will respond to this by saying that you've offered the source code for *something*, but that (by its very nature) we have no way of knowing that the java applet you're serving is in fact the compiled form of the source you've presented. Please understand, I am not in any way asserting that Meetecho would pull this sort of bait and switch, just that there are a lot of us who don't like running random java applets from sites that we (otherwise) *do* know/trust. Never mind people that we don't know. Doug (yet) -- "We could put the whole Internet into a book." "Too practical." Breadth of IT experience, and depth of knowledge in the DNS. Yours for the right price. :) http://SupersetSolutions.com/ _______________________________________________ Ietf mailing list Ietf@xxxxxxxx https://www.ietf.org/mailman/listinfo/ietf