Reply to thread

Message: [QUOTE="Twisted, post: 653132"] Jar files and packages are orthogonal. Package-private is the highest level of privacy you can count on in the runtime environment. Secure packages are needed to block mix-and-match attacks and the like. Serialization also introduces headaches; some can be solved with end-to-end encryption of object streams (whether objects are time-shifted, e.g. saved to disk, space-shifted, e.g. sent over the network, or both) but others require treating incoming objects as potentially hostile, even if they are instances of a trusted class... [/QUOTE]