Re: XML-RPC and Stand-alone Apps

> I'm not sure this is even possible, however, I'll pose the
>  hypothetical.  I have a stand-alone Java application.  One of the
>  requirements is that I be able to support different types of inbound
>  communications to act upon the application.  One of the communication
>  methods is XML-RPC.  However, for security reasons, we'd rather

To support multiple protocols, have a look at XINS, it supports
XML-RPC, SOAP and POX-RPC (simple HTTP parameters in, XML out) and can
be extended with new protocols:
http://xins.org/

>  methods is XML-RPC.  However, for security reasons, we'd rather
>  implement XML-RPC without a traditional Tomcat or other application
>  server container.  We would like to receive XML-RPC requests straight
>  to the application and handle them natively.  I'm not sure if there's

Why do you consider this more secure? What are the main concerns,
exactly? Is it with applications servers in general or specifically
with Tomcat? Note that some application servers or runtime
environments such as PHP have spent ages optimizing their security.

If you write your own HTTP server application, you may be introducing
security issues without knowing it.

Other options including putting a secure layer in front. A very simple
one would be Apache, which is by many people considered to be one of
the most secure HTTP servers around.

Hope this helps.

Regards,


Ernst


 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/xml-rpc/

<*> To unsubscribe from this group, send an email to:
    [email protected]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/