On Thu, 8 Jul 2004, Dario V. Fassi wrote:
> It's available a Signed Version of postgresql.jar ?
>
No, but why would you want one? As I understand it signed jar files are
only useful in a sandboxed environment where access to protected resources
is desired. The postgresql jar file itself is useless without an
application calling it so the application should include the
postgresql.jar file and be signed, not the pg jar file.
Further as the driver is maintained by unrelated volunteers there are
problems because no one individual is in charge of producing the jar
files and there is no certificate chain available from someone like
Verisign.
Kris Jurka
