Assuming we are talking physical tiers, my understanding is that in order to pass data from say the data tier to the business logic tier the JSON format is used (or XML), so say I have an ORM (Hibernate) as part of my data access logic, I then serialize the resulting Object (pointed to by a REST call from BLL) to JSON and pass it into the business layer. Finally I run any business logic required on this object in the BLL and serialize it to JSON and send it to the client.

My question is this, with all this (potentailly personal) JSON data being passed over from network to network, does it need any form of security, for example some kind of encryption on the JSON messages?

  • That question is talking about 3-layer architecture, I am talking about between 3 physical tiers – FinalFind Jul 15 '15 at 15:11
  • Only if you need the data to be passed securely between tiers. – Robert Harvey Jul 15 '15 at 21:54
  • Well, a social network for example, peoples names addresses etc, surely would need to be secured (passwords ofc are handled differently with SSL etc) – FinalFind Jul 15 '15 at 22:05

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.