Did MS include any _Sun_ classes in their
JVM that were insecure?  Did they just
compile source/include classes Sun gave
them?

The reason I ask is that I am offering
compilation against the MS 1.1 JVM*, but
at the moment it does not include all the
MS classes (just the ones in the main zip
archive**).

* <http://www.physci.org/javac.jsp?bcp=MS>
** <http://localhost:8080/codes/msjvm.jsp?file=7>

After considering (and rejecting) uploading
the other archives, I am now thinking to go
in the opposite direction.  

If _only_ MS classes are insecure, I can
take the MS classes _out_ of the existing
.zip and declare any Java that compiles
against the remaining Sun classes to be
'secure' applications and applets.

Would that be a reasonable assumption?

[ F'Ups set to comp.lang.java.machine ]