You are correct that we were previsously using a direct reference to a Sun JDK class. This was my mistake but has been corrected. You can look at the currrent code here:
There is a chapter named "Security" in the following document:
Please let us know if you have any comment or suggestion as they would be highly appreciated.
Daniel, thanks for the information. It is exactly the type of information that I was looking for. At first glance, things look reasonable to me. I will have to dig deeper to understand stuff and provide suggestions.
I will be in touch. :)