The moose likes Architect Certification (SCEA/OCMJEA) and the fly likes Web Tier Security Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login

Win a copy of Make it so: Java DB Connections & Transactions this week in the JDBC forum!
JavaRanch » Java Forums » Certification » Architect Certification (SCEA/OCMJEA)
Bookmark "Web Tier Security" Watch "Web Tier Security" New topic

Web Tier Security

subu ananthram
Ranch Hand

Joined: May 16, 2004
Posts: 102
For the customers using FBN, can we use Client Certificate Authentication for authenticating users or should it be declarative security?
Jeremy Hsu
Ranch Hand

Joined: Mar 28, 2005
Posts: 79
The use case only put security constraint that SSL must be used. As long as your design satisfy that constraint, you will be fine. Therefore, to answer your question, I say that it is your design choice.
I agree. Here's the link:
subject: Web Tier Security
It's not a secret anymore!