Security

[Jeff Dube]

I am developping a application with JSP pages and i would like to make it secure.
I need to be able to have multiple user and password.
Is there any links or informations about the JSP security ??
Thank you
Jeff

[jon boydell]

Depends whether you want to use JAAS or not. I am guessing not. So all you really need is:
1. an SSL session (you need an SSL cert, you can create a self-signed cert for testing using your web server)
2. a JSP that has a username/password form on it
3. a Servlet that will validate the username/password
the form, when submitted calls the Servlet which validates the username and password. The SSL session prevents people from sniffing the username and password.

[Subbu Aswathanarayan]

Hi,
Can you tell me more about SSL and how to use it?
Thanks.
Subbu