Apple Expands Gatekeeper

By Rich | June 5, 2013

I missed this when the update went out last night, but Gregg Keizer at Infoworld caught it:

“Starting with OS X 10.8.4, Java Web Start applications downloaded from the Internet need to be signed with a Developer ID certificate,” Apple said. “Gatekeeper will check downloaded Java Web Start applications for a signature and block such applications from launching if they are not properly signed.”

This was a known hole – great to see it plugged.

1 Comment

C
Chris Pepper 2013-06-05
Hmm. I hope Apple fixed Gatekeeper's inability to support execution of (normal, unsigned) webapps. The Shift-Open workaround is only for local applications—there is no equivalent for webapps—so the only way to run a webapp from a website has been to turn Gatekeeper completely off. This is a lousy workaround, especially for people who need to run a webapp regularly, and thus cannot take advantage of Gatekeeper. I hope that's fixed, but not holding my breath.