java - Security of HTTP tunnelling with RMI -
i concerned data being sent our remote database java based client software not being sent securely using http tunneling rmi rather https.
the problem need prove vunerability boss before takes company.
how can send , receive data rmi cgi serverlet test theory?
i have used wireshark see packets , can see url data posted have no idea of easy way replicate rmi protocol (without writing whole java app).
i believe can create special method simple signature
string foo(string);
now try call method mechanism , user wireshark catch packets. think if data not encrypted able see parameter , return value in clear text.
Comments
Post a Comment