<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Spring in Practice &#187; security</title>
	<atom:link href="http://springinpractice.com/tag/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://springinpractice.com</link>
	<description>Willie Wheeler&#039;s Spring blog</description>
	<lastBuildDate>Fri, 18 May 2012 07:39:53 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
		<item>
		<title>Fixing PKIX path building issues when using JavaMail and SMTP</title>
		<link>http://springinpractice.com/2012/04/29/fixing-pkix-path-building-issues-when-using-javamail-and-smtp/</link>
		<comments>http://springinpractice.com/2012/04/29/fixing-pkix-path-building-issues-when-using-javamail-and-smtp/#comments</comments>
		<pubDate>Sun, 29 Apr 2012 20:08:01 +0000</pubDate>
		<dc:creator>Willie Wheeler</dc:creator>
				<category><![CDATA[Chapter 08 - Communicating]]></category>
		<category><![CDATA[Troubleshooting]]></category>
		<category><![CDATA[certificate]]></category>
		<category><![CDATA[e-mail]]></category>
		<category><![CDATA[javamail]]></category>
		<category><![CDATA[pkix]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[smtp]]></category>
		<category><![CDATA[ssl]]></category>
		<category><![CDATA[tls]]></category>

		<guid isPermaLink="false">http://springinpractice.com/?p=873</guid>
		<description><![CDATA[I&#8217;m writing this post in support of chapter 8 in my book Spring in Practice, which deals with Spring/JavaMail integration, since it&#8217;s not always straightforward to configure an app to use SMTP. The problem Suppose that you&#8217;ve configured your JavaMail &#8230; <a href="http://springinpractice.com/2012/04/29/fixing-pkix-path-building-issues-when-using-javamail-and-smtp/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://springinpractice.com/2012/04/29/fixing-pkix-path-building-issues-when-using-javamail-and-smtp/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Quick tip: Spring Security role-based authorization and permissions</title>
		<link>http://springinpractice.com/2010/10/27/quick-tip-spring-security-role-based-authorization-and-permissions/</link>
		<comments>http://springinpractice.com/2010/10/27/quick-tip-spring-security-role-based-authorization-and-permissions/#comments</comments>
		<pubDate>Wed, 27 Oct 2010 08:40:13 +0000</pubDate>
		<dc:creator>Willie Wheeler</dc:creator>
				<category><![CDATA[Chapter 07 - Authorization]]></category>
		<category><![CDATA[Quick Tips]]></category>
		<category><![CDATA[authorization]]></category>
		<category><![CDATA[permissions]]></category>
		<category><![CDATA[roles]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[spring]]></category>

		<guid isPermaLink="false">http://springinpractice.com/?p=424</guid>
		<description><![CDATA[The problem: hardcoded role-based authorization One of the challenges around using Spring Security is that the examples&#8212;both in the documentation and on the web&#8212;tend to promote an overly-simple approach to role-based authorization, hardcoding roles in the source in a non-configurable &#8230; <a href="http://springinpractice.com/2010/10/27/quick-tip-spring-security-role-based-authorization-and-permissions/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://springinpractice.com/2010/10/27/quick-tip-spring-security-role-based-authorization-and-permissions/feed/</wfw:commentRss>
		<slash:comments>13</slash:comments>
		</item>
		<item>
		<title>Spring Security 3 database schemas for MySQL</title>
		<link>http://springinpractice.com/2010/07/06/spring-security-database-schemas-for-mysql/</link>
		<comments>http://springinpractice.com/2010/07/06/spring-security-database-schemas-for-mysql/#comments</comments>
		<pubDate>Tue, 06 Jul 2010 07:36:28 +0000</pubDate>
		<dc:creator>Willie Wheeler</dc:creator>
				<category><![CDATA[Chapter 06 - Authentication]]></category>
		<category><![CDATA[Chapter 07 - Authorization]]></category>
		<category><![CDATA[Reference]]></category>
		<category><![CDATA[mysql]]></category>
		<category><![CDATA[schemas]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[spring]]></category>
		<category><![CDATA[spring security]]></category>

		<guid isPermaLink="false">http://springinpractice.com/?p=202</guid>
		<description><![CDATA[In preparation for a DZone Refcard on Spring Security 3 I&#8217;m doing, here are the Spring Security database schemas for MySQL. This isn&#8217;t intended to be an exhaustive treatment. Rather it&#8217;s more a reference for the MySQL dialect version of &#8230; <a href="http://springinpractice.com/2010/07/06/spring-security-database-schemas-for-mysql/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://springinpractice.com/2010/07/06/spring-security-database-schemas-for-mysql/feed/</wfw:commentRss>
		<slash:comments>7</slash:comments>
		</item>
		<item>
		<title>Hashing and salting passwords with Spring Security 2</title>
		<link>http://springinpractice.com/2008/10/11/hashing-and-salting-passwords-with-spring-security-2/</link>
		<comments>http://springinpractice.com/2008/10/11/hashing-and-salting-passwords-with-spring-security-2/#comments</comments>
		<pubDate>Sun, 12 Oct 2008 02:02:44 +0000</pubDate>
		<dc:creator>Willie Wheeler</dc:creator>
				<category><![CDATA[Chapter 06 - Authentication]]></category>
		<category><![CDATA[Tutorials]]></category>
		<category><![CDATA[authentication]]></category>
		<category><![CDATA[cryptography]]></category>
		<category><![CDATA[hash]]></category>
		<category><![CDATA[salt]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[spring security]]></category>

		<guid isPermaLink="false">http://springinpractice.com/?p=824</guid>
		<description><![CDATA[This post was originally written as a recipe for our book Spring in Practice, but we just didn&#8217;t have enough room to include it. It&#8217;s still (we think, anyway) a great recipe, so we&#8217;re making it available here free of &#8230; <a href="http://springinpractice.com/2008/10/11/hashing-and-salting-passwords-with-spring-security-2/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://springinpractice.com/2008/10/11/hashing-and-salting-passwords-with-spring-security-2/feed/</wfw:commentRss>
		<slash:comments>15</slash:comments>
		</item>
		<item>
		<title>Excerpt: Login and remember-me discussion</title>
		<link>http://springinpractice.com/2008/09/06/login-remember-me/</link>
		<comments>http://springinpractice.com/2008/09/06/login-remember-me/#comments</comments>
		<pubDate>Sat, 06 Sep 2008 22:37:16 +0000</pubDate>
		<dc:creator>Willie Wheeler</dc:creator>
				<category><![CDATA[Chapter 06 - Authentication]]></category>
		<category><![CDATA[News]]></category>
		<category><![CDATA[authentication]]></category>
		<category><![CDATA[login]]></category>
		<category><![CDATA[openid]]></category>
		<category><![CDATA[passwords]]></category>
		<category><![CDATA[remember-me]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[spring security]]></category>
		<category><![CDATA[sso]]></category>

		<guid isPermaLink="false">http://springinpractice.wordpress.com/?p=82</guid>
		<description><![CDATA[Spring in Practice centers on using Spring to implement technical solutions to common problems, but it&#8217;s also important for developers to understand the problem they&#8217;re trying to solve before implementing a solution. In the book we work pretty hard to &#8230; <a href="http://springinpractice.com/2008/09/06/login-remember-me/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://springinpractice.com/2008/09/06/login-remember-me/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Storing passwords securely</title>
		<link>http://springinpractice.com/2008/08/31/storing-passwords-securely/</link>
		<comments>http://springinpractice.com/2008/08/31/storing-passwords-securely/#comments</comments>
		<pubDate>Sun, 31 Aug 2008 17:28:35 +0000</pubDate>
		<dc:creator>Willie Wheeler</dc:creator>
				<category><![CDATA[Chapter 06 - Authentication]]></category>
		<category><![CDATA[Tutorials]]></category>
		<category><![CDATA[authentication]]></category>
		<category><![CDATA[cryptography]]></category>
		<category><![CDATA[hash]]></category>
		<category><![CDATA[password]]></category>
		<category><![CDATA[salt]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://springinpractice.com/?p=855</guid>
		<description><![CDATA[When dealing with user account information, there are lots of different security concerns that come up. Some examples include making sure users use strong passwords, preventing automated registrations, helping end users distinguish real sites from phishing sites, transmitting user data &#8230; <a href="http://springinpractice.com/2008/08/31/storing-passwords-securely/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://springinpractice.com/2008/08/31/storing-passwords-securely/feed/</wfw:commentRss>
		<slash:comments>12</slash:comments>
		</item>
		<item>
		<title>Setting up public key authentication (PKA) over SSH</title>
		<link>http://springinpractice.com/2008/03/19/setting-up-public-key-authentication-pka-over-ssh/</link>
		<comments>http://springinpractice.com/2008/03/19/setting-up-public-key-authentication-pka-over-ssh/#comments</comments>
		<pubDate>Wed, 19 Mar 2008 21:18:48 +0000</pubDate>
		<dc:creator>Willie Wheeler</dc:creator>
				<category><![CDATA[Quick Tips]]></category>
		<category><![CDATA[authentication]]></category>
		<category><![CDATA[pka]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[ssh]]></category>

		<guid isPermaLink="false">http://springinpractice.com/?p=788</guid>
		<description><![CDATA[I assume you already know the whys, concepts, and terminology; this is just a statement of the steps involved. I&#8217;m using OpenSSH and a DSA key pair. Step 1 Generate a key pair: ssh-keygen -t dsa Generating public/private dsa key &#8230; <a href="http://springinpractice.com/2008/03/19/setting-up-public-key-authentication-pka-over-ssh/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://springinpractice.com/2008/03/19/setting-up-public-key-authentication-pka-over-ssh/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How to reCAPTCHA your Java application</title>
		<link>http://springinpractice.com/2008/03/13/how-to-recaptcha-your-java-application/</link>
		<comments>http://springinpractice.com/2008/03/13/how-to-recaptcha-your-java-application/#comments</comments>
		<pubDate>Thu, 13 Mar 2008 21:42:36 +0000</pubDate>
		<dc:creator>Willie Wheeler</dc:creator>
				<category><![CDATA[Chapter 04 - Web forms]]></category>
		<category><![CDATA[Chapter 08 - Communicating]]></category>
		<category><![CDATA[Tutorials]]></category>
		<category><![CDATA[captcha]]></category>
		<category><![CDATA[recaptcha]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://springinpractice.com/?p=805</guid>
		<description><![CDATA[reCAPTCHA is a novel CAPTCHA system developed by the School of Computer Science at my alma mater, Carnegie Mellon University. I won&#8217;t explain its coolness here since they do a good job of explaining that coolness themselves. What I will &#8230; <a href="http://springinpractice.com/2008/03/13/how-to-recaptcha-your-java-application/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://springinpractice.com/2008/03/13/how-to-recaptcha-your-java-application/feed/</wfw:commentRss>
		<slash:comments>76</slash:comments>
		</item>
		<item>
		<title>Acegi overview (now Spring Security)</title>
		<link>http://springinpractice.com/2008/02/26/acegi-overview/</link>
		<comments>http://springinpractice.com/2008/02/26/acegi-overview/#comments</comments>
		<pubDate>Tue, 26 Feb 2008 20:24:16 +0000</pubDate>
		<dc:creator>Willie Wheeler</dc:creator>
				<category><![CDATA[Chapter 06 - Authentication]]></category>
		<category><![CDATA[Chapter 07 - Authorization]]></category>
		<category><![CDATA[Tutorials]]></category>
		<category><![CDATA[acegi]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[spring security]]></category>

		<guid isPermaLink="false">http://springinpractice.com/?p=760</guid>
		<description><![CDATA[I wrote this back when Spring Security was called Acegi. Now it&#8217;s out of date, but I&#8217;m leaving it in the archive. Acegi has been around for a while, but I just recently tried it out and am impressed with &#8230; <a href="http://springinpractice.com/2008/02/26/acegi-overview/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://springinpractice.com/2008/02/26/acegi-overview/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

