This topic contains 2 replies, has 2 voices, and was last updated by 
josh October 4, 2021 at 7:52 am.
-
Posts
-
pers_d7pyza
KeymasterA system parallel to Java Jar’s could achieve much higher performance with alternative designs that either trusted key signers or trusted a stored table of trusted namespace/hash values as previously validated. That’s actually an independent point. What prevents Java implementations from doing the 2nd thing?
-
joshThe tricks that further lower the low performance hit for hash checks:
a) lazy loading
b) security policy switch that includes “check before every code run” vs. periodic check. Periodic check then becomes background check that is done on most code runs that are not on/off Unix style utilities, so the window of risk in the normal case is low.
-
You must be logged in to reply to this topic.