Thawte has been selling code signing certificates, but the root that
goes with them is not widely installed.

The procedures for downloading roots and installing them are far too
onerous and complicated for the average end user.

I wonder if anyone has come up with a Java Web start program that will
install a root or programmer's cert in cacerts automatically.

It would make sense if the code signing companies themselves used such
a program from their website to freshen the certificates.

They really are the only ones who logically should sign a JWS
application that meddles with root certs.

Ideally it would freshen all the browser cert stores at the same time.

The same program could be used by all the cert companies, just using
different data, and their own signature already widely known.

I think there is a legal problem if I wrote such a program on my own
and used it as a global update all certs from all companies with one
click of a button.  Just trust me.


--
Canadian Mind Products, Roedy Green.
Coaching, problem solving, economical contract programming. 
See http://mindprod.com/jgloss/jgloss.html for The Java Glossary.