Re: Applet Security Question

I will soon be writing my first applet. While I've done quite a bit of
programming local classes in Java, I have barely done anything but read a
few bits of information on an applet.

This applet will be for my clients to edit their settings, which means
when
started the applet needs to know the client's name and password. The page
the applet is started from is on a secure server and only able to be
accessed as a secure page and is reached from the client logging in from
another page.

The only way I know of that I can pass the password on to the applet is by
including it in the web page itself, as a parameter to be passed to the
applet. As I said, the page is secure and can only be reached by logging
in with the password in the first place.

How much of a security risk is it to have the password included as a
parameter for the applet if it is on a secure page as I described? I have
considered encrypting it, but it would have to be light encryption. I
know
even light encryption is better than nothing, but how secure is it just to
make sure the page itself can only be accessed with a password and is a
secure page?