Atmosphere push - Securing channels

Question

My question regarding how to secure the channel in an Application using Atmosphere pub/sub. I'm using Primefaces 3 & GlassFish server for this purpose.

Whenever I create a channel and subscribe to it, I can always see the WebSocket url in cleartext in the dev console/firebug in chrome (for instance). Can somebody sneak into subscribing to my channel? If yes, How can I secure my channel (SSL/Https maybe?). Or do I need to encrypt the channel name whenever I add new one.

Please let me know If I'm not clear with my query.

Thanks!!!

Answer 1

just use https/wss as URL instead of http/ws (make sure SSL is properly configured with GlassFish)

Thanks

-- Jeanfrancois