[Jboss-dev-forums] [Design of JBoss Remoting, Unified Invokers] - security issues

[<ma...@jb...>]

I delivered a presentation on JBoss/Remoting tonight at the Philly JBUG, and received a question that I didn't know the answer.  I figured I post it here since I promised to find the answer :-)

It involves security.  We know that today JBoss/Remoting supports SSL, thus providing security at the low-level transport layer.

But how does JBoss/Remoting plan to provide security against things such as denial-of-service or man-in-the-middle type attacks.  Can JBoss/Remoting even combat these attacks or does something have to be built on top of it?

I'm no security expert and don't understand all the nuances of these types of problems - hopefully, some one else does.

View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3881027#3881027

Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3881027