Communication Security (Magic xpa 3.x)
Communication between the Magic xpa client and the Web server (requester) is compressed but not secured.
Communication between non-Magic xpa clients (such as Web clients) and the Web server (requester) is not compressed and not secured.
To secure this communication, use the https protocol.
The https protocol (SSL\TLS) encrypts the communication between the client and the Web server and ensures that the server is a trusted one.
Communication between the requester, broker and engine is encrypted using Asymmetrical and Symmetrical encryption. No hard-coded keys are used and it is possible to define the Symmetric encryption mechanism and the key length.
The algorithm and key length are defined in the mgreq.ini file in the EncryptedCommunication keyword.