ActiveX Security

• Control is loaded from local disk if it is there
• If not found locally, then downloaded automatically
• Control is checked by
  • Publisher receives a certificate from a trusted Certifyinh Authority
  • Publisher encrypts certificate into document using their private key
  • Client uses publisher's public key to decode and check document
• ``Exploder'' (http://www.halcyon.com/mclain/ActiveX) has been through this process. It shuts down Windows95 cleanly, but could do worse