SSL is not implemented by HttpClient but is provided by an external company such as Sun. HttpClient uses the SSL implementation that you chose. How secure the SSL connections are is dependent on the algorithm used. To be sure you should disable known weak algorithms in your SSL implementation. Furthermore you can check the server certificate and supply a client certificate. For a ultra-sensitive data (like banking applications) it is certainly not sufficient to have just the code you posted.
HTH
Odi
Querent wrote:
Dear all,
I'd like to know how secure it is ssl in HttpClient. I set up the host configuration using
HttpClient client = new HttpClient(); client.setStrictMode(true); client.getHostConfiguration().setHost(LOGON_SITE, LOGON_PORT,
"https");
while LOGON_SITE and LOGON_PORT is the address of https site. I am able to do either GetMethod or PostMethod.
Is my set up enough for HttpClient such that my program communicate using secure connection ? Does HttpClient reliable on ssl ?
Thank a lot.
quent
--------------------------------- Do you Yahoo!? SBC Yahoo! DSL - Now only $29.95 per month!
-- _________________________________________________________________ NOSE applied intelligence ag [www] http://www.nose.ch ortwin gl�ck [email] [EMAIL PROTECTED] hardturmstrasse 171 [pgp key] 0x81CF3416 8005 zurich [office] +41-1-277 57 35 switzerland [fax] +41-1-277 57 12
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
