Regarding the Java 0-day exploit I'd like to configure the Java Runtime such that it only executes signed applets, preferably such that I either

  • define a whilelist of certificates I allow
  • define allowed root certificates
  • prevent at least unsigned/untrusted applets from starting at all

How can I configure that?



  • Have you considered just disabling Java in your browser completely? – Daniel Beck Aug 30 '12 at 15:39
  • 1
    @DanielBeck: It's not always an option, unfortunately. – user1686 Aug 30 '12 at 15:51
  • @grawity Yes, but if Java isn't required for particular applications or uses, it's the best option. – Daniel Beck Aug 30 '12 at 15:54
  • 1
    Opera will let you disable Java, but enable it on a case-by-case basis. – dotancohen Aug 30 '12 at 17:48
  • Java IS required on the internal network for some apps. I don't want it to run stuff from the Internet. – Marki Aug 30 '12 at 20:14

What you want to achieve is mostly not impossible but very difficult as you have to modify the used JRE.

Therefore an easier approach is to use Java only on Internet pages you trust. This can be done e.g. in Firefox in combination with NoScript add-on. NoScript disables by default all plugins - they are only shown if the users enables the domain temporary or permanent.

| improve this answer | |
  • 1
    The problem with NoScript is that it disables JavaSCRIPT together with the rest. I don't want to lose Javascript. I want to disable Java on SOME sites. By site, by certificate or whatever. Doing that seems to be an impossible task. – Marki Aug 30 '12 at 20:13
  • In the default configuration, yes. But you can configure NoScript to block only plugin objects. – Robert Aug 31 '12 at 7:14
  • Ok, and how? I've seen this forum post: forums.informaction.com/viewtopic.php?f=7&t=9502 However it doesn't seem to really work for everyone. – Marki Aug 31 '12 at 7:52
  • In the configuration enable scripts globally and only disable the Java plugin. – Robert Aug 31 '12 at 11:14
  • Didn't I say that it needs to work for some sites? – Marki Aug 31 '12 at 16:54

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.