The encryption can be performed in one of two ways.  The first is to add an 
interceptor before the remoting or within the data marshaller implementation (I 
need to make the second a little easier to do).  The other is to have a SSL 
transport (i.e. https).  

I don't want to have authentication be part of the core remoting.  When being 
used within an ejb call, this is already takend care of as is an interceptor 
before and after remoting (the payload just contains the security information). 
 However, using remoting stand alone, want to be able to provide a way to do 
this.  Also, when dynamic classloading is added back in, will then have to make 
remoting aware of authentication (at least indirectly). 

As for timeframe, https invoker is a little ways out as am just starting on the 
http invoker implementation.  A simple encryption marshaller would be fairly 
simple to write, if need something soon.  What is your timeframe for needing 
this?  Don't guess you would have extra cycles to help on this?

View the original post : 
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3861096#3861096

Reply to the post : 
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3861096


-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt
_______________________________________________
JBoss-Development mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jboss-development

Reply via email to