Secure socket connection

Question

I'm working on a school project with a server application that holds centralized data, and client applications that hold cached data that will be synchronized with sockets. Everything is written in Java.

What is good practice? How can I stop people from listening to my traffic? Or prevent people to understand what is said?

Answer 1

You simply use SSLSocketFactory instead of SocketFactory for your client server application. That way, the communication between the two will be totally encrypted. You can secure your client server app in less than a day, if you know basic Java. Here's a tutorial.

Answer 2

SSL is the standard practice. See the javax.net.ssl package, and the JSSE Reference Guide. But this may be beyond the scope of your project or your abilities at this stage. Check with your instructor.