Iv noticed that some java webstart app's already have the "always trust" tick box pre-ticked befor running.
i cant seem to find anything on this over the net.
can someone please explain why.

if you use a proper certificate that is trusted by the java runtime, it will default to accept.
so basically anything you buy will get accepted, while selfsigned wont.

thanx.
well that makes sense.