Securing Tomcat with SSL
Aleksa Vukotic, James Goodwill · Apress eBooks · 2011
In the previous chapter, we learned how to protect web applications in Tomcat from unauthorized access by configuring security realms. However, securing web resources with usernames and passwords can still leave a web application vulnerable to malicious access. If anyone eavesdrops on the communication between client and server, they can get access to the username and password of the legitimate user and compromise the web application’s security. These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.