Securing HTTP requests to web services from smartphones
Can anyone recommend a strong method to secure HTTP requests to a web service from a smartphone client (iPhone, Android, and BlackBerry)? Preferably something more secure than an MD5 hash...
开发者_运维技巧Thanks!
Use HTTPS (HTTP Secure). That's HTTP with SSL encrtpyion.
How to configure that depends on the webserver used. If it's for example Apache HTTP Server, then you should checkout the SSL/TLS Strong Encryption How-To. Or if it is for example Apache Tomcat, then checkout the SSL Configuration HOW-TO.
Once done that, just use https:// URLs instead of http:// URLs to access the web service. You can even configure the webserver to redirect from http:// to https:// automatically.
精彩评论