Is communication in java rmi secure?

Question

java rmi中的客户端和服务器之间的通信是否安全（即默认加密）？

Answer 1

Encoded, yes. Encrypted, no.

JERI for JINI gives JRMP (the RMI protocol) over SSL, IIRC.

JSR #76 would have provided RMI Security, however it was controversially voted down .

Answer 2

I think you mean "encrypted" not "encoded". The answer is no. If you're using RMI in a non-trusted environment I would suggest something like RMI over SSH tunneling .

Answer 3

By secure I guess you mean encrypted. Not by default with RMI. You can use custom socket factories to encrypt RMI comms.

Answer 4

In short, no.

http://java.sun.com/j2se/1.4.2/docs/guide/rmi/faq.html#encryption

In essence, the network channel has to be encrypted if you need things to be secure.

Answer 5

到目前为止没有提到：您可以在机器之间设置VPN以实现完整的第2层安全性。