By default, the Verifier is disabled on .Net and Java

[stephen at corsaire.com (Stephen de Vries)]

Michael Silk wrote:
> On 5/9/06, Dinis Cruz <dinis at ddplus.net> wrote:

<snip>

> > Is there a example out there where (by default) java code is executed in
> > an environment with :
> >
> >     * the security manager enabled (with a strong security policy) and
> >     * the verifier disabled
>
> Yes. Your local JRE.

...but only in the exceptional case where a local Java application was
started with a security manager activated, but without the -verify flag
enabled.
Most local Java applications are started without the verifier enabled
and without a security manager.

For untrusted applets and webstart apps, both the verifier and a
security manager are enabled.



-- 
Stephen de Vries
Corsaire Ltd
E-mail: stephen at corsaire.com
Tel:    +44 1483 226014
Fax:    +44 1483 226068
Web:    http://www.corsaire.com