Raj,
All this stuff is secure to star with - i.e. the services are not
exported and such like.
It is your responsibility to ensure that you keep the system secure.
For example with RMI, you should definitely use the JSSE stuff.
If you are using an HTTP based communication like SOAP, or simply HTTP
itself, you should try to do this via SSL/HTTPS, HTTP should really only
be used for testing purposes, or within a secure network.
This is just basically the normal commonsense stuff you would apply when
implementing any distributed system.
- Andrew
On Thu, 2006-07-06 at 04:26 +0530, Raj wrote:
> Andrew
>
> How about security related issue with ofbiz ,when we do this type of
> communication in ofbiz,and if ofbiz allow do access its core business logic
> and data,then how can we say ofbiz is a robust application
>
> -----Original Message-----
> From: Andrew Sykes [mailto:
[hidden email]]
> Sent: Thursday, July 06, 2006 4:15 PM
> To:
[hidden email]
> Subject: Re: RMI VS AXIS
>
> Raj,
>
> Axis is SOAP, OFBiz tries to provide as many communication protocols as
> possible to the outside world. (HTTP/S is also supported).
>
> RMI is faster as it uses compression when sending. It also seems a more
> natural choice since you are using java at the other end.
>
> It's worth pointing out that the same issues apply to Axis as RMI i.e.
> you must allow the exporting of the service etc (as Brett mentioned
> earlier).
>
> - Andrew
>
> On Thu, 2006-07-06 at 04:12 +0530, Raj wrote:
> > Hi all
> >
> > I have general question related with SOA in ofbiz
> >
> > What is difference between RMI and axis web service ,why ofbiz has
> both?.
> >
> >
> >
> > Regards
> >
> > P.Raj
> >
> >
> >
--
Kind Regards
Andrew Sykes <
[hidden email]>
Sykes Development Ltd
http://www.sykesdevelopment.com
Locked
