Pankaj Acharya wrote:
>
> Ah haa..!! Thank you Mr. Martin.
>
> Now, my problem is: I can make "https:" calls from the servlet when i put
> my servlet in Java Web Server. I want to know whether the data i post to the
> "https" resource (say a cgi script in the secure web server) and the response
> i get back are really secure or not..? Can you throw some light on this..?
>
> And could you please tell me what exactly is the "https protocol driver"..?
> and what is "SSLSocket implementation"..? How their work differs..? And even
> if i use a "SSLSocket implementation" will i still need a "https protocol
> driver"..? If yes i guess that only JWS has such a driver right now.. Does
> anybody know of any other SSL capable servlet engine with such a driver..?
>
> Please help me.
Please, first read the documentation for the constructor
public URL(String protocol,String host,int port,String file)
of the java.net.URL class at
http://java.sun.com/products/jdk/1.2/docs/api/index.html
You will see the diferrence there. SSLSocket implements the
transportation layer of network connection, the protocol
handler the application layer of network connection. So you
need them both.
SSL secures the connection between client and server. The server
authentication is compulsory, the client authentication is optional.
The data are secured during transmition, but they are unsecure
after storing on the server. Be aware of that, the owner of the server
can do anything with your data, SSL cannot prevent him from that.
Martin
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
INET, a.s. Mgr. Martin Kuba
Kralovopolska 139 e-mail: [EMAIL PROTECTED]
601 12 Brno WWW: http://www.inet.cz/~makub/
Czech Republic tel: +420-5-41242414/33
--------------------------------------------------------------------
PGP fingerprint = D8 57 47 E5 36 D2 C1 A1 C3 48 B2 59 00 58 42 27
http://wwwkeys.cz.pgp.net:11371/pks/lookup?op=index&search=makub
--------------------------------------------------------------------
___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".
Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
