Two Laptop Bag
The moose likes Servlets and the fly likes HTTP vs HTTPS development difference Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Java » Servlets
Bookmark "HTTP vs HTTPS development difference" Watch "HTTP vs HTTPS development difference" New topic

HTTP vs HTTPS development difference

Priyanka Dandekar
Ranch Hand

Joined: Aug 06, 2008
Posts: 52
I am new to HTTPS based web applications, and was still not sure how is it different to develop a HTTPS based web application then HTTP based web application.

Do I really need to take care of somethings specially in case I am doing HTTPS web application development?

I assume it should not be different from HTTP but still want to be sure if there are somethings specifically taken care while my application is going to be used over HTTPS.

Any thoughts ?

Priya - Mockup Tool | Java | Struts2 | Lucene
Ulf Dittmer

Joined: Mar 22, 2005
Posts: 42965
There's nothing different from a development point of view. Just make sure you don't hardcode the protocol anywhere (which would be bad practice anyway).

If you need to check whether a request was made using HTTP or HTTPS, you can use the HttpServletRequest.isSecure() method.
benjamin muktesh

Joined: Jul 01, 2008
Posts: 24
HTTP and HTTPS are network protocols.
You application is (or should be) agnostic to these.

The server on which your application will run will have to be configured to use HTTPS.

Do a bit of reading on SSL configuration on Tomcat or IIS for that matter and you should have a better idea.
Priyanka Dandekar
Ranch Hand

Joined: Aug 06, 2008
Posts: 52
Thanks a lot for your responses.....I just read about OSI layer to understand the networking aspect of it...Looks like SSL comes at Presentation layer of OSI stack.....and our application program runs at application layer....So it need not worry about what is next layer doing.

Hope my understanding here is correct.......

I am also going through the SSL stuff ....
I agree. Here's the link:
subject: HTTP vs HTTPS development difference
It's not a secret anymore!