I have this encryption algorithm to scramble URLs I send by email for
registration confirmation.... it works fine, but today the key used in
the encryption is hard coded in the bean ...
so, options:
1) to move the password to a properties file :(
2) to move the password to the "application context", what means
Glassfish somewhere
what is the best place to store the secret key ?
* if I can use Glassfish to hold this info in administrative level, it
would be the best solution for me..
--
Please help to test this application:
http://fgaucho.dyndns.org:8080/cejug-classifieds-richfaces