You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cxf.apache.org by frank <fr...@gmail.com> on 2012/11/19 12:29:01 UTC

Using Fediz plugin with HTTP (i.s.o. HTTPS)

>
> Hi,


Is it possible to use the Fediz plugin wothout using HTTPS? I have a use
case where HTTPS cannot be used.

Cheers,

Frank

RE: Using Fediz plugin with HTTP (i.s.o. HTTPS)

Posted by Oliver Wulff <ow...@talend.com>.
Hi there

Technically, this works fine. It depends on your security requirements because the tokens are not protected in the network. If you get in the possession of such a token you could access the application as well. Of course, you might not be fast enough to use the token to access the application as you can use the token only once to access an application and the token is valid for one application only.

HTH

Thanks
Oli



------

Oliver Wulff

Blog: http://owulff.blogspot.com
Solution Architect
http://coders.talend.com

Talend Application Integration Division http://www.talend.com

________________________________________
From: frank [franksked@gmail.com]
Sent: 19 November 2012 12:29
To: users@cxf.apache.org
Subject: Using Fediz plugin with HTTP (i.s.o. HTTPS)

>
> Hi,


Is it possible to use the Fediz plugin wothout using HTTPS? I have a use
case where HTTPS cannot be used.

Cheers,

Frank