thawte Code Signing Solution Ensures Integrity of Applications on Adobe AIR

(17/06/2008)

With Adobe® AIR™, a cross-operating system runtime that enables rich Internet applications (RIAs) on the desktop, developers and end users are assured that applications on Adobe AIR are from a trusted publisher and that applications can be securely delivered and installed – all thanks to advanced Code Signing solutions from thawte, Inc., a wholly-owned subsidiary of VeriSign, Inc.

By obtaining a thawte® Code Signing Certificate for an application on Adobe AIR, RIA developers can digitally sign applications, resulting in “virtual shrinkwrap” protection. Developers benefit because users are more likely to install trusted applications. For the end-user, a broken digital signature means code has been tampered with or modified, and the application can't be installed on the machine. This protection offers developers a way to ensure for users that applications deployed on Adobe AIR are secure.

Adobe requires all applications on Adobe AIR to be digitally signed, and thawte is the first Certification Authority offering Adobe AIR developer certificates for Web developers.

“thawte developed this new Adobe AIR Developers certificate in time for the global launch of Adobe AIR to help ensure that these applications can safely be delivered to the desktop,” said Michael Lin, vice president of SSL product management at VeriSign. “By preserving the integrity of applications on Adobe AIR and providing end-users with assurances about developers’ identity from day one, thawte proves authenticity of developers and safeguards consumers against hackers and other threats. This advanced protection also dovetails with VeriSign’s strategy to protect online content, applications and transactions.”

Adobe AIR is a milestone runtime environment that enables developers to use the skills and Web technologies – such as HTML, AJAX, PDF, Adobe Flash® and Adobe Flex® – they already employ to deliver RIAs on the desktop. When an application on Adobe AIR is installed, Adobe AIR presents the user with a security dialog to confirm they wish to install the application from a particular provider who is identified by digitally signing the application. The installer also informs the user that the application will be able to access the local hard disk. The user makes the final decision as to whether or not they trust the provider and want to install the application based on the trusted identity.

“The use of digital signatures protects the integrity of applications and confirms the authorship of RIAs deployed on Adobe AIR. They are essential to the safe delivery of content on the desktop,” said Luis Polanco, senior product manager, Adobe AIR at Adobe. “Unlike Web applications, applications on Adobe AIR are installed on a user’s machine, so they must support the same kind of security protections required for desktop software. thawte Code Signing Certificates are an important part of achieving this goal and we are delighted to have thawte on board for the launch of Adobe AIR.”

Related topics:  Application and software security   Authentication and identity management 

Print version | Email to a friend | Related articles

Data breaches: Trends, costs and best practices gives you all the latest information on securing personal and corporate data, key recommendations for immediate action to improve data security, and how to respond to data breaches.

Other Security news and resources