Why would FedEx require users to enable Flash as "run always?" Is there really not a better solution available to simply whitelist their site or be given a pop-up in Chrome asking to enable it temporarily?
It actually irks me a bit about Chrome/Firefox. I understand they want to kill these addons. But I still unfortunately am forced to use sites that require Java and/or Flash. I'm just grateful MS still has the older version of IE available in Win10 so I can get these important things done.
In a past life, I had to keep two different browser installs, each with a different JVM version in obsolete browsers, aside from my "real" browser to deal with crap like that.
That said, Java applets are effectively dead, so government services now require installing and running separate program which listens at localhost for connections from browser. Honestly, it doesn't look like a big win for me, more like a big loose, from a security point. But here we go.
This sounds crazy smart. Why don't western countries do this? You could even put the fingerprint in the barcode of your driver's license.
Having said that, a better implementation would be pretty awesome.
And, yes, those certificates are unrelated, AFAIK.
It's a total nightmare because most of it is abandonware or is still for sale but unmaintained!
I've been through multiple attempts at doing it in an enterprise, one in January this year, and it always ends with the determination that Java applets are critical to websites used by the business and not going anywhere. Healthcare portals are a big offender.
I would rather know where flash beings and ends and have to jump through hoops. Actually I would prefer it never run at all ever. Flash not run is "right".
There have been too many security flaws where Flash would allow remote execution of arbitrary code, and that eventually means viruses. If my family gets a virus, then I am on the hook for it.