Hi,
We use Applet->Servlet request/response streams to send sensitive
information about our sales. We are using SSL for network encryption.
Is there anyway someone could see the sensitive information anywhere
once the data leaves applet VM and before it enters servlet VM?
Thanks
Viss
Roedy Green - 03 Nov 2003 02:31 GMT
>Is there anyway someone could see the sensitive information anywhere
>once the data leaves applet VM and before it enters servlet VM?
no. Though, Bush could if ordered the CIA to snoop. An attack would
more likely involve replacing code for the Applet or server or just
crack the server and go snooping around.
--
Canadian Mind Products, Roedy Green.
Coaching, problem solving, economical contract programming.
See http://mindprod.com/jgloss/jgloss.html for The Java Glossary.
VK - 03 Nov 2003 23:15 GMT
Depends on who you are trying to protect yourself from.
There are only two points where the Internet traffic can be intercepted
for sure: sending server and receiving server.
Between these two points the IP packages go by the rule of the
"optimized fluctuation" (or Monte Carlo law - don't kill me for the
terms, it's my personal translation to English). It means that despite
there always is the main path (this is how ping and tracert programs
work), 0.0*x - x % of packages can come to the receiving server from
totally different directions.
So in order to trace the whole traffic between point A and B, you have
to either be in A or B, or you have to connect a super mainframe to a
physical narrowness of the Net (Atlantic cable, Canada/USA T1 etc). The
last option is for the "Bugs" TV series, not for the real life, so you
may feel yourself pretty secure from this side :-)
About A and B control it is as being said: unless the government decides
to use the Carnivore program on you (are you in the USA?) or unless you
provider is a nasty crook, the 1024bit certificate is the plenty good
maximum of what you can do now to protect your data.
P.S. 3rd (updated) Parkinson-Merfy law: everything created by one human
being can be disassembled and/or changed by another human being.