Regarding the Java 0-day exploit I'd like to configure the Java Runtime such that it only executes signed applets, preferably such that I either
- define a whilelist of certificates I allow
- define allowed root certificates
- prevent at least unsigned/untrusted applets from starting at all
How can I configure that?