Reputation: 311
I have created a Restfull
web-service
in java
that is consumed by an android application
. The work is almost done.
Now I feel the need to secure my web-service
. I don't want to send a login
and password
for that purpose, because I'm already asking the user for it, and testing whether he exists in my database
or not. What I want is to encrypt
exchanged data.
Do you have any idea how can I integrate that ?
Upvotes: 0
Views: 2801
Reputation: 76
I recommend you to use HTTPS for your need. SSL/TLS provide better encryption decryption over https. And you don't need to reinvent wheels for this basic purpose. If you are using tomcat to host REST web serivces then here is a simple tutorial to turn on SSL in tocamt
look at this one also
Upvotes: 4