Security Policy

"Making a distributed system secure is a mindnumbingly difficult task."—William Grosso

• Keep API as simple as possible.
• Grant your code (downloaded code) the minimal permissions needed.
• The SecurityManager tells JVM what the code can't do.