Last modified: 2014-11-07 16:25:10 UTC
So I was testing timedmediahandler on computers at my university (I figure they represent a fairly common config). On MSIE: *I hit play button on an audio file *Goes to java cortado fallback as it should *Prompt comes up saying my java is out-dated *I click continue anyways *Pop up says applet is blocked by your security settings (My security setting is "high" which is the default. Apparently this blocks all unsigned java applets when you need an upgrade. There's probably a good portion of our user base using old java. Signing the applet should get around this. There's a signed version at http://theora.org/cortado.jar, in my experiments, the copy of IE I did the test on successfully loaded this version (After a are you sure prompt). We could potentially just use this signed version, however it would probably be ideal if instead Wikimedia signed the applet we serve, as then the publisher would be listed as "Wikimedia", so people would be more likely to trust it vs a publisher as some random person. See also: http://www.java.com/en/download/help/jcp_security.xml
Finally got around to filing an RT ticket for this: RT #7695
>There's a signed version at http://theora.org/cortado.jar In some security settings, the permissions attribute is also required, which that copy is missing. (In reply to Bawolff (Brian Wolff) from comment #1) > Finally got around to filing an RT ticket for this: > > RT #7695 So to summarize what was said there. I had assumed this was something that could easily be done with our existing SSL certs. That was an incorrect assumption, and we would need to buy a new cert. Its unclear if we want to do that since work is ongoing on Brion's js ogv player. http://lists.wikimedia.org/pipermail/multimedia/2014-June/000664.html
Is this any closer now after that discussion ?
https://rt.wikimedia.org/Ticket/Display.html?id=7695 ("Digitally sign cortado video player java applet") is still open and not clear who to make a decision...
At this point id reccomend just concentrating on brion's solution instead
