P4
FULL PRODUCT VERSION :
java version "1.6.0-ea"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.6.0-ea-b16)
Java HotSpot(TM) Client VM (build 1.6.0-ea-b16, mixed mode, sharing)
A DESCRIPTION OF THE PROBLEM :
The Java Web Start trust dialog is too wordy, too large, and too confusing, compared to the Internet Explorer trust dialog.
Screenshots of the two dialogs are at:
- http://kano.net/in/ie-warning
- http://kano.net/in/java-warning
The JWS dialog uses too many words. I suggest that in general, the JWS dialog should look more like the IE dialog. Here are some specific changes that should be made:
1. Instead of "Do you want to trust the signed application ...", say "Do you want to run this software?", and show the application name and signer name listed as "Name:" and "Publisher:". When the user clicks the publisher name, a certificate information dialog appears, showing who signed the application.
2. This is important, instead of "Yes/No/Always", use a simple "Run" and "Don't Run", with extra options (maybe a checkbox) to turn on and off "always trust this publisher"
3. Don't use those tacky warning/info icons, or at least not so many. One icon per dialog is enough.
I also suggest that on Windows XP with Service Pack 2, JWS use the new Attachment Manager Service (described at http://msdn.microsoft.com/security/productinfo/XPSP2/emailhandling/dev_imp.aspx) to display the dialog.
I think that a better trust dialog would make many developers feel more comfortable about releasing their software through Java Web Start. I personally currently don't want to distribute simple applications through JWS because of the trust dialogs; I'm afraid of making the download process too complicated for the user. With these changes, I would feel much more comfortable.
REPRODUCIBILITY :
This bug can be reproduced always.
###@###.### 2005-3-01 00:02:24 GMT
java version "1.6.0-ea"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.6.0-ea-b16)
Java HotSpot(TM) Client VM (build 1.6.0-ea-b16, mixed mode, sharing)
A DESCRIPTION OF THE PROBLEM :
The Java Web Start trust dialog is too wordy, too large, and too confusing, compared to the Internet Explorer trust dialog.
Screenshots of the two dialogs are at:
- http://kano.net/in/ie-warning
- http://kano.net/in/java-warning
The JWS dialog uses too many words. I suggest that in general, the JWS dialog should look more like the IE dialog. Here are some specific changes that should be made:
1. Instead of "Do you want to trust the signed application ...", say "Do you want to run this software?", and show the application name and signer name listed as "Name:" and "Publisher:". When the user clicks the publisher name, a certificate information dialog appears, showing who signed the application.
2. This is important, instead of "Yes/No/Always", use a simple "Run" and "Don't Run", with extra options (maybe a checkbox) to turn on and off "always trust this publisher"
3. Don't use those tacky warning/info icons, or at least not so many. One icon per dialog is enough.
I also suggest that on Windows XP with Service Pack 2, JWS use the new Attachment Manager Service (described at http://msdn.microsoft.com/security/productinfo/XPSP2/emailhandling/dev_imp.aspx) to display the dialog.
I think that a better trust dialog would make many developers feel more comfortable about releasing their software through Java Web Start. I personally currently don't want to distribute simple applications through JWS because of the trust dialogs; I'm afraid of making the download process too complicated for the user. With these changes, I would feel much more comfortable.
REPRODUCIBILITY :
This bug can be reproduced always.
###@###.### 2005-3-01 00:02:24 GMT