J2SE Version (please include all output from java -version flag):
java version "1.7.0_55"
Java(TM) SE Runtime Environment (build 1.7.0_55-b08)
Java HotSpot(TM) Client VM (build 24.55-b01, mixed mode, sharing)
AND
java version "1.8.0_05"
Java(TM) SE Runtime Environment (build 1.8.0_05-b07)
Java HotSpot(TM) Client VM (build 25.5-b01, mixed mode)


Does this problem occur on J2SE 7ux? Yes / No (pick one)
Yes


Operating System Configuration Information (be specific):
Windows 7 (32/64bit), Ubuntu 12.04 (32bit) and Ubuntu 13.20 (64bit). But appears to be a global issue.


Hardware Configuration Information (be specific):
Virtual machines


Bug Description:
We have observed that the java security prompt is shown twice, if the checkbox "Do not show this again for apps from the publisher and location above" is checked.
If the checkbox is not marked the message is only shown once.

In our setup we have one central server hosting a login applet (server A), and many service providers each with their own server hosting the actual websites (servers B, C, D ...).

Server B (and C, D, E, ...) presents the applet from server A to the end user (client).

Our manifest attributes look like this:
Manifest-Version: 1.0
Ant-Version: Apache Ant 1.7.1
Created-By: 1.5.0_22-b03 (Sun Microsystems Inc.)
Trusted-Only: true
Sealed: true
Built-By: Administrator
Target-Environment: prod
Caller-Allowable-Codebase: *
Application-Library-Allowable-Codebase: *
Vendor: DanID
Title: Digital Signatur
Version: 1.0
Build: DEVELOPMENT BUILD 2013-10-29 12.17.23
Permissions: all-permissions
Codebase: *
Application-Name: NemID

We do not see the problem when loading the signed applet from https://www.java.com/en/download/installed.jsp.


Steps to Reproduce (be specific):
Prerequisites: Access to a signed applet on a setup where the applet is hosted on an other webserver then the webpage including the applet (for example: https://www.nemid.nu/dk-da/#log_paa_selvbetjening).
1) The signed applet used in this test should not have been accepted with "Do not show this again" checked on the acceptance screen previously.
2) Load the signed applet. The acceptance of signed applet screen is shown.
3) Check the checkbox "Do not show this again".
4) Press "Run".
5) The acceptance of signed applet screen is shown again.

Priority justification:
ILW = MMM => P3