• Post Reply Bookmark Topic Watch Topic
  • New Topic

https connection from an application?

 
stacy wellington
Greenhorn
Posts: 3
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
I need to connect to https url and need the data to be encrypted over the network. I created the URL object using the https:// url and obtained a HttpsURLConnection from it. and it works!

my concerns are in regards to whether the data is being sent encrypted or not. it seemed to easy. is the only way it would work is if the communications were encrypted? what is the key strenth 56bit, 128bit?

edit:
setting the ssl debug flag, -Djavax.net.debug=ssl, outputs lots of goodies. looks like it is using 128bit:


[ February 15, 2006: Message edited by: stacy wellington ]
 
Ulf Dittmer
Rancher
Posts: 42970
73
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
It is that easy! RC4 only has 40bit and 128bit options, I think (56 bit is a DES key length). According to this page, the encryption should be 128bit if you see that string.

If you're interested in seeing what goes over the wire (or are doubting that communication is actually encrypted), you can use a tool like Ethereal -which knows about HTTP-, and you'll see quickly whether it's plaintext or encrypted.
 
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
Boost this thread!