RE: question about serialization

[Jeroen Frijters]

Chris Gray wrote:
> Granting AllPermission to everything loaded by the system 
> class loader is IMHO acceptable, *iff* by system class
> loader you mean the class loader which 
> loads java.* classes from a trusted location.

This is the "bootstrap class loader" aka "null class loader" (because
Object.class.getClassLoader() returns null).

> Not to be confused with the application class loader
> which loads from the -classpath, which is the one 
> returned by ClassLoader.getSystemClassLoader() (aaargh).

Regards,
Jeroen