What are the enhancements in the latest Java for Windows Vista?
This article applies to:
Platform(s): Vista
Browser(s): Internet Explorer 7.x
JRE version(s): 6.0
The latest version of JRE available on www.java.com is very much compatible with Windows Vista.
Following are some of the enhancements that has undergone in the lastest version of JRE on windows Vista.
Security
On Windows Vista, there is a more restrictive sandbox for signed applets. A user has fewer privileges than if they were running on an other Windows OS.
For example, on a Windows OS other than Windows Vista, when running a signed applet, a user is prompted with a security warning dialog box and must respond. If Yes is clicked, the applet will have AllPermissions to run on the user's machine. This includes permission to write/delete a file from the local disk.
However, on a Windows Vista OS, this is no longer true. Instead, AllPermissions is limited to Java Applet scope, not Windows scope. Because a process running in IE has a low integrity level, it will not be able to write/delete a file from a medium/high integrity level directory.
A signed JNLP application can run only with medium integrity. Granting AllPermissions in a Java Web Start application only permits the Security Manager to allow operations that it would otherwise deny by throwing SecurityExceptions. It does not in any way elevate the permissions a user or a process has on the system.
User Experience
HTTPS IE7 blocks navigation to HTTPS sites that present a digital certificate having any of the following problems:
Certificate was issued to a hostname other than the current URL's hostname
Certificate was issued by an untrusted root
Certificate is expired
Certificate is revoked
Upon encountering a digital certificate problem, IE7 presents an error page that explains the problem. The user may choose to ignore the warning and proceed in spite of the certificate error (unless the certificate was revoked). If the user clicks through a certificate error page, the address bar flood fills with red to serve as a persistent notification of the problem.
Mixed-Content Prompt
A user no longer sees the so-called Mixed-Content prompt, which read:
This page contains both secure and nonsecure items.
Do you want to see the nonsecure items?
IE7 renders only the secure content and offers the user the opportunity to unblock the nonsecure content using the Information Bar.
New Default Protocol Mode
IE7 of Windows Vista has changed the default HTTPS protocol setting to disable the weaker SSLv2 protocol and to enable the stronger TLSv1 protocol.
With the above changes in IE7 of Windows Vista, a Java plugin user will see different behavior when running their applets.
Java Control Panel
Change Cache Location Dialog Disabled in the Control Panel. Since the cache location must be set to a low-integrity directory, the ability to change it is disabled in the control panel.
Java Control Panel: Under the advanced tab, the Default Java for browser checkboxes does not work for a standard user. To workaround the issue, you will need to run the Java Control Panel as an administrator.
AutoDownload of JREs is Disabled in the Control Panel: Since the posted autodl bundles cannot run on Vista (without being re-written, and re-staged for all releases) the autodl feature is turned off by default, and the entry is disabled in the advanced tab of the Control Panel.
Program Compatibility Assistant Dialog in Vista: Upon exit of Java Control Panel, you might see a Program Compatibility Assistant dialog box displayed by Windows Vista. We recommend choosing This control panel works correctly so that the dialog does not appear again next time you exit Java Control Panel.
Choosing Open the control panel using recommended settings causes Java Control Panel to work incorrectly. To undo the setting, you will need to remove the following registry entry that contains javacpl.cpl or jpicpl32.cpl:
Windows XP compatibility mode: Java SE 6 applications/applets (standalone, Java Plug-in, Java Web Start) do not support running in Windows XP Compatibility Mode.
NEED MORE HELP?
If you require further assistance, please make sure you check through our
Help and FAQ sections thoroughly. We probably have a page that answers your question.
Printable Version