Code signing is an attractive option for developers because it can give a Java application or extension additional privileges that it would not ordinarily have. However, sometimes the best decision is not to sign your code at all, since this results in a better user experience and the application automatically runs in a secure sandbox.
