views:

82

answers:

2

i want to create a flash application that sends information to a web server and i want the information to be encrypted and secured as possible.

i know that using adobe flash media server or wowza it's possible to have some sort of javascript server side programming (asc) and sending and fetching information using the rtmpe protocol. is it more secured in any way then using php for server side programming and using some other secured protocol to transfer information from the server to the client ?

A: 

I think both do have security in their own directions. You have to decide which one you want to go with. However, you need to know about most if not all security considerations of both to be able to come up with something more secure.

Sarfraz
the server itself will be very secured using both solutions. but using adobe flash media server, it's persistent connection which will allow me to see exactly how much time the user used the application.
ufk
A: 

adobe flash media server

  1. adobe flash media server provides persistent connection which can show you exactly when the user used the application and for how long.
  2. adobe flash media server provides RTMPE protocol (encrypted real time messaging protocol) which allows secure transfer of data without using ssl. RTMPE is faster than SSL and does not require certificate management as SSL does. specifications at http://lkcl.net/rtmp/RTMPE.txt
  3. adobe flash media server provides a helpful admin page that shows how many users are connected to each instance of application and show how many resources are used per instance
  4. adobe flash media server admin provides very useful debugging and tracing capabilities.

PHP

  1. the requests can be sent by ssl (https) which is very secured
  2. amfphp - AMF allows for binary serialization of Action Script (AS2, AS3) native types and objects to be sent to server side services.
  3. monitoring can easily be achieved by installing any monitoring tools that work with your web server (apache in my case)

conclusion

for now i'll stick to adobe flash media server till I'll find secured and easier methods to use with PHP.

ufk