Re: Question on HTTP interfacing (Java/C++)



On Wed, 31 Aug 2005 19:02:59 +0200, Andrea Desole
<news@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote or quoted :

>> a). how security can be enforced using only HTTP (our C++ libraries
>> don't do HTTPS)
>
>without https you are on your own. You will have to encrypt the messages
>by yourself

Mixing languages triples your problem. You have to come up with a
scheme in both languages that down to the last bit implements
encrypting identically.

In your security, is the problem someone spoofing messages, snooping
on messages or both?

Are you concerned only about casual snoops or about heavy duty
crackers?

One way out of this that you boss may allow is to use Java on both
ends, then have Java decrypt and hand off to C++. Then you have JCE or
SSL at your disposal with the same code running both ends.

Now all your datacommunication is in Java. You can use anything you
please even RMI. see http://mindprod.com/jgloss/remotefileaccess.html
To communicate locally on hard disk with C++ you could use a pipe,
GET/PUT, SQL, a socket, a circular queue on disk, even even JNI
merging the two programs.

--
Canadian Mind Products, Roedy Green.
http://mindprod.com Again taking new Java programming contracts.
.


Quantcast