Menu
Is communication between clients and servers in java rmi secure (i.e. encrypted by default)?
807
A security vulnerability in the Remote Method Invocation component of the Java Runtime Environment allows unauthenticated network attacks which can result in unauthorized operating system takeover including arbitrary code execution.
RMI is a mechanism for communicating (only) between two machines running Java Virtual Machines. When Java code on machine A needs a service or a method, respectively, of (remote Java object) objB on machine B it starts a remote method invocation. It does this the same way as invoking a local (Java) object's method.
RMI uses a standard mechanism (employed in RPC systems) for communicating with remote objects: stubs and skeletons. A stub for a remote object acts as a client's local representative or proxy for the remote object.
Not mentioned this far: You can set up a VPN between the machines for full layer 2 security.
121
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
