Chapter 13. The SSL and TLS Protocols in a J2EE Environment
In Chapter 11 on page 377, we discussed the capabilities for invoking cryptographic functions from within Java code. However, most programmers and application designers would prefer to work with ready-built cryptographic protocols rather than have to create them from the basic elements of encryption and digital signatures.
Secure Sockets Layer is the most widely used protocol for implementing cryptography in the Web. The advantage of a protocol such as SSL is that it removes the need for the application developer to deal with the nuts and bolts of cryptography. J2EE can make use of this function in two ways: by using the SSL support built into the J2EE products and/or by using an SSL
Get Enterprise Java™ Security: Building Secure J2EE™ Applications now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
