December 2009
Intermediate to advanced
416 pages
8h 38m
English
Authentication and authorization is only one aspect of security. Any application that communicates through a clear text channel with its customers is potentially unsafe. For example, it's not only possible to capture a session cookie reading the HTTP header, but also possible to change a financial transaction by hacking the application context.
In the following sections, we will describe how to secure an application at transport level, starting from the HTTP protocol and then moving to the RMI transport layer.
Your AppStore application communicates with its client through clear text HTTP protocol. In order to take advantage of secure connections, you have to configure your ...
Read now
Unlock full access