Decides whether a key is valid and trusted to insert an extension
under the privileged permissions of this class.
The actual implementation is very restricted: accepts if a trusted
certificate exists in the keystore defined by the system properties
ch.ethz.prose.keystore.location and
ch.ethz.prose.keystore.password . (ATTENTION: THIS
IS A HUGE SECURITY HOLE!!!). Feel free to build a
subclass with a better implementation.
It was thought to attach certificates to signed extensions to help
the target system to make its decision. As in JDK 1.2.2 the class
java.security.cert.Certificate is not Serializable, this feature is
unluckily not yet implemented.
Parameters: key - the key that signed the extension true if a trusted certificate exists in the keystore |