Hi brainy people,
I have a client application that is going to post XML containing password
information to a web page on an SSL site.
The client application is not generating a session or other communication to
the site, its simply being given the URL and issuing a single post, it will
also receive the response.
Does the XML need to be encrypted, or is that covered the SSL built in
encryption?
Josh - 27 Feb 2008 12:15 GMT
> Hi brainy people,
>
[quoted text clipped - 7 lines]
> Does the XML need to be encrypted, or is that covered the SSL built in
> encryption?
Just answered my own question. I think it will all be encrypted, just found
this link where the author says the handshake takes place before the data is
sent.
http://www.ourshop.com/resources/ssl_step1.html