Infrastructure

When logging into CILogon, the Java Web Start application that launches now triggers a Security Warning because the app is unsigned and does not request Permission attributes. See attached screenshot. This significant;y decreases usability of the sign-in process (building on top of the problems introduced when web start was removed from default java installs). To fix this usability bug, we need to support login and certificate download without a security warning. Ideally, we would also eliminate the JWS dependency altogether as it is typically not installed on end-user machines.

THis may not happen on all OS/Java versions. It triggered for me on Mac OS X 10.7.5, running Java 1.7.0_45 with default security settings (High) and lowered security settings (Medium). I'm not sure how it behaves on other versions.