title: Security of HTTP tunnelling with RMI
body: <p>I am concerned that the data that is being sent from our remote database to the java based client software is not being sent securely as it is using http tunneling with RMI rather than https.</p>
  
  <p>The problem is I need to prove the vunerability to my boss before he takes it up with the IT company.</p>
  
  <p>How can I send and receive data to an RMI cgi serverlet to test this theory?</p>
  
  <p>I have used wireshark to see the packets and I can see the url that the data is POSTed to but have no idea of an easy way to replicate the RMI protocol (without writing a whole Java app).</p>