Pankaj Acharya wrote:
>
> Hello Martin,
>
> okay.!! I read the comments in the URL Class's contructor. i need
> both(SSLSocket and protocol handler), now i understand.
>
> But since my servlet CAN MAKE "HTTPS:" calls (without throwing a
> MalformedURLException).. can i assume that Java Web Server's servlet engine
> does all the Security Related Things Seamlessly..? I mean the compulsory
> server authentication that you mention in your reply. Or am i wrong in
> assuming this..?
I think that JWS does it seamlessly. Maybe the server SSL certificate
must be signed by one of Certification Authorities listed in some
configuration file. I haven't tried the JWS so I don't know.
> I am assuming the data sent to the "https:" resource by my servlet will be
> encrypted and so will be the data that i receive without me having to bother.
> Now tell me whether this assumption is true. I am not concerned what the
> Server Owner can do to my data. I am just concerened about the transmission of
> data . whether that is secure or not..?
Yes. The data are secured during transmition. They cannot be read or modified
by a third party.
Martin
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
INET, a.s. Mgr. Martin Kuba
Kralovopolska 139 e-mail: [EMAIL PROTECTED]
601 12 Brno WWW: http://www.inet.cz/~makub/
Czech Republic tel: +420-5-41242414/33
--------------------------------------------------------------------
PGP fingerprint = D8 57 47 E5 36 D2 C1 A1 C3 48 B2 59 00 58 42 27
http://wwwkeys.cz.pgp.net:11371/pks/lookup?op=index&search=makub
--------------------------------------------------------------------
___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".
Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
