Re: IBM i in the cloud (was social media)

Joe,

you obviously dosn't have a clue of the security issues a REST enabled
application
has to handle - HTTPS dosn't solve anything and SOAP is out of the question
when
you talk about iPhone Apps that has to "speak" with 50 REST services on the
server.




On Sun, Nov 21, 2010 at 11:57 PM, Joe Pluta <joepluta@xxxxxxxxxxxxxxxxx>wrote:

On 11/21/2010 1:38 PM, Henrik RÃtzou wrote:

I'm still waiting for an answer on how EGL handles security ?

That's really not a question, Henrik. It's a discussion topic <smile>.
"Security" as in what? Authentication? Authorization? For thin client
EGL uses JSF which has a robust security framework. For REST
communications the simplest method is HTTPS. Is there something above
that which you need? Because to me REST is typically used to
communicate between tiers of an application rather than to external
consumers. Externally I would use SOAP, which also has very robust
security.

I guess I'm asking "what is the business requirement" and "what are we
comparing it to"?

Joe
--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.