The security framework around Java ME is a topic for much debate. Believe me when I say, Sony Ericsson is well aware of the pain involved with signing and security prompts for midlets. This is something that the Head of Developer World, Simon Walker makes clear in our official announcement about a change in our signing policy for application submissions to our application store.
To sum it up, here’s the revised certification criteria:
* Applications can be unsigned at submission
* Applications that don’t require any permissions can be unsigned when deployed to the sales channels (NEW!)
* All Java applications must pass the Unified Testing Criteria .
* Applications that require permissions should be signed through JavaVerified or with Thawte Premium Server CA (NEW!) or Verisign Class 3 third-party certificates. (NEW!)
As always comments are welcome! You can also make your voice heard using this poll.
Erik Starck
Community Manager, Developer World
