This week's book giveaway is in the Agile and other Processes forum. We're giving away four copies of The Mikado Method and have Ola Ellnestam and Daniel Brolund on-line! See this thread for details.
I am new to HTTPS based web applications, and was still not sure how is it different to develop a HTTPS based web application then HTTP based web application.
Do I really need to take care of somethings specially in case I am doing HTTPS web application development?
I assume it should not be different from HTTP but still want to be sure if there are somethings specifically taken care while my application is going to be used over HTTPS.
There's nothing different from a development point of view. Just make sure you don't hardcode the protocol anywhere (which would be bad practice anyway).
If you need to check whether a request was made using HTTP or HTTPS, you can use the HttpServletRequest.isSecure() method.
HTTP and HTTPS are network protocols. You application is (or should be) agnostic to these.
The server on which your application will run will have to be configured to use HTTPS.
Do a bit of reading on SSL configuration on Tomcat or IIS for that matter and you should have a better idea.
Priyanka Dandekar
Ranch Hand
Joined: Aug 06, 2008
Posts: 52
posted
0
Thanks a lot for your responses.....I just read about OSI layer to understand the networking aspect of it...Looks like SSL comes at Presentation layer of OSI stack.....and our application program runs at application layer....So it need not worry about what is next layer doing.