...
| Wiki Markup |
|---|
The principal protections included in {{SSLSockets}} that are not provided by the {{Socket}} class are \[[Java API|AA. Java References#APIBibliography#API 06]\] |
- Integrity Protection. SSL protects against modification of messages by an active wiretapper.
- Authentication. In most modes, SSL provides peer authentication. Servers are usually authenticated, and clients may be authenticated as requested by servers.
- Confidentiality (Privacy Protection). In most modes, SSL encrypts data being sent between client and server. This protects the confidentiality of data, so that passive wiretappers won't see sensitive data such as financial information or personal information of many kinds.
| Wiki Markup |
|---|
It is also important to use SSL for secure Remote Method Invocation (RMI) communications because RMI depends on object serialization and serialized data must be safeguarded in transit. Gong et al. \[[Gong 2003|AA. Java References#GongBibliography#Gong 03]\] describe how to secure RMI communications using {{SSLSockets}}. |
...
| Wiki Markup |
|---|
\[[API 2006|AA. Java References#APIBibliography#API 06]\] \[[Gong 2003|AA. Java References#GongBibliography#Gong 03]\] 11.3.3 "Securing RMI Communications" \[[Ware 2008|AA. Java References#WareBibliography#Ware 08]\] \[[MITRE 2009|AA. Java References#MITREBibliography#MITRE 09]\] [CWE ID 311|http://cwe.mitre.org/data/definitions/311.html] "Failure to Encrypt Sensitive Data" |
...