I missed this when the update went out last night, but Gregg Keizer at Infoworld caught it:
“Starting with OS X 10.8.4, Java Web Start applications downloaded from the Internet need to be signed with a Developer ID certificate,” Apple said. “Gatekeeper will check downloaded Java Web Start applications for a signature and block such applications from launching if they are not properly signed.”
This was a known hole – great to see it plugged.
Reader interactions
One Reply to “Apple Expands Gatekeeper”
Hmm. I hope Apple fixed Gatekeeper’s inability to support execution of (normal, unsigned) webapps. The Shift-Open workaround is only for local applications—there is no equivalent for webapps—so the only way to run a webapp from a website has been to turn Gatekeeper completely off. This is a lousy workaround, especially for people who need to run a webapp regularly, and thus cannot take advantage of Gatekeeper. I hope that’s fixed, but not holding my breath.