Given that Java 6 is now deprecated by Oracle and there recently has been notification of a 0day (that will exist forever now that Oracle is not patching JRE6), what can we do to prevent drive-by exploitation of Java within our browsers?
We cannot remove Java from the browser as my organization relies heavily on it for internal and some external applets. We also can not upgrade to Java 7 at the moment due to a number of legacy applications (though we are speeding up this process but I cannot see it happening in the next 6 months).
I have tried searching for ways to whitelist only our allowed applets but everything seems to be for Java 7. Short of disabling support for unsigned applets and ensuring we sign all applets is there anything we can do?
Hat tips given to those that includes methods to deploy the solution via GPO, multi-browser support (so maybe something at the Java level and not browser specific).
Just to clarify, we cannot upgrade to Java 7 and can not remove Java from the browser. I am looking for a solution to only allow the browser to run applets from
*.ourfriendsdomain.com for example.