Currently the JRE supports blacklisting signed Jar files, however the list of disallowed files is
currently delivered with the JRE so adding to the blacklist requires
releasing a new JRE. We will extend the mechanism used to deliver dynamic
updates for security baseline data to also update blacklist data. In the
future when blacklisting is expanded to work with certs and root certs this
same mechanism will support that as well. On Windows 32 with AU enabled it
will download the updated baseline and blacklist data every 7 days. On all
other platforms, whenever an applet of jws app is launched it will check for
updated data if it hasn't been downloaded in the past 7 days.