Re: Availability of a Signed Version of postgresql.jar

On Thu, 8 Jul 2004, Dario V. Fassi wrote:

> It's available a  Signed Version of   postgresql.jar  ?
> 

No, but why would you want one?  As I understand it signed jar files are 
only useful in a sandboxed environment where access to protected resources 
is desired.  The postgresql jar file itself is useless without an 
application calling it so the application should include the 
postgresql.jar file and be signed, not the pg jar file.

Further as the driver is maintained by unrelated volunteers there are 
problems because no one individual is in charge of producing the jar 
files and there is no certificate chain available from someone like 
Verisign.

Kris Jurka