ansaurus

Question

Java client/server configuration and security across domains

Answer 1

+1 A:

For your Applet to be able to communicate to anywhere else than where it was downloaded from you are going to need to sign it, or forward any requests from it from where it was sent from.

Romain Hippeau 2010-07-07 13:53:26

Thanks - but does that apply if all the "sites" are subdomains of the same overall site, e.g. mydomain.com?

mikera 2010-07-07 14:29:36

@mikera - see here http://java.sun.com/docs/books/tutorial/deployment/applet/security.html

Romain Hippeau 2010-07-07 14:38:08

@mikera - The rules for JNLP are somewhat different.

Romain Hippeau 2010-07-07 14:40:27

Thanks romain - however the linked document is still ambiguous as far as I can tell as to whether it will allow an applet from a.mydomain.com to access a server at b.mydomain.com - any ideas on this?

mikera 2010-07-07 14:48:45

@mikera - If you have doubt, try it.

Romain Hippeau 2010-07-07 14:50:15

@mikera - How is this ambiguous - They can make network connections to the host they came from.

Romain Hippeau 2010-07-07 15:12:32

It's ambiguous because it doesn't define what it means by host - IP address? domain name? subdomain? virtual host? I clearly could go and spend a day or two building different server configurations and testing all the combinations but I would have thought that it should be defined somewhere....

mikera 2010-07-07 16:21:49

Answer 2

+2 A:

better way is to manage your configuration under only one domain

* Website/web application server at http://www.mydomain.com
* Applet and/or Java Web Start jar at http://www.mydomain.com/files
* Server listening on some port at http://www.mydomain.server.com

You can use method of authentication for file access

sagar 2010-07-20 10:26:18

ansaurus

tags:

views:

answers:

Java client/server configuration and security across domains

related questions