Hey Kevan. I did some work on this subject while working at Allaire a while back. The work I did was with the JRun app server, which forms most of the foundation of MX, so presumably the protocol is the same, or at least similar. Similar to your situation, we had a client who was concerned about the security of the communication over the connector (ie, the .dll that managed the communication between the Web and App servers).
Also, as I recall, info on the subject was NOT widely available, so if you don't get your answer, let me know and I'll dig into my notes. Best regards, Patrick Quinn ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Signup for the Fusion Authority news alert and keep up with the latest news in ColdFusion and related topics. http://www.fusionauthority.com/signup.cfm