some interesting questions about SSL

[Former Member]

I did SSL many times but I still wonder:

1) Why https is considered safer than http?

2) for an (ABAP+JAVA) system, why we need to configure the ABAP side?

What is the relationship between the config on ABAP side and the config on

the JAVA side?

3) For an ABAP only system, do we have to SSL?

4) if we have some ABAP only OR JAVA only OR (ABAP+JAVA) dialog

instances , what is the SSL configuration on them?

Thanks! Points!

Message was edited by:

jennifer lee

[former_member511121]

Hi Jennifer,

1) http is not secure, easy tools will allow you to retrieve everything typed by each user in the screen. https is secure http. All data is encrypted with a private key and can be decrypted using a public key that will be stored on your local machine. All ip data is now encrypted and it is hard to decrypt it.

2) It is not mandatory anymore to install a ABAP system anymore, for example Portals is a pure JAVA application. If your application somehow needs the ABAP stack as well than it should be configured so the JAVA side can use it. Further configuration is needed on your ABAP stack to make it secure.

3) It also depends on local requirements of your customer. If security and data consistency is not very important then it is not nessasery of course.

4) Some easy found links to get started:

http://help.sap.com/saphelp_nw2004s/helpdata/en/e0/48e13a1522a441e10000000a11405a/frameset.htm

Have fun!!

Kind regards,

Sjoerd Lubbers