Federal Contracts and some State Contracts require SSL for any communications between two end points. SSL is also required any kind of monetary transaction
Besides the above ...
I understand that SSL is still suspectible MitM attacks but besides that, secure (as in nobody can ease drop easily) text, audio and video communications would be one.
I wasnt thinking about game applications, more of the above
From what I understand, if the url in which the flex application is hosted in is HTTPS, then any communications it has outside is https?
I know that AIR 2.0 comes with the securesocket class just for SSL. And if the Flex does SSL via https addy, then this leaves the server side.
Besides Flex, and Java in which i use on my day job. I use C#, PB, and Java at home. At least with Java, I use a library called Socket Tools for my SSL communications. The license is quiet cheap too ....
Might be possible to integrate with that ... I only do so because the library is used by me across different languages. But from what I understand, from Java 1.6, SSL libraries are in the SDK.
(edit): to summerize:
The Federal and State governments have bought into the hype of SSL being considered secure. As thus, their contracts require SSL for any communication of sensitive data.
In order to be considered to provide services, my company would have to adhere to the requirements. In these cases, I was not thinking about gaming but more of the non-gaming area.
For instance, providing a communication log and opening the application outside of the intra
net. This would allow people to access said application from their home computers if they were working from home.
In some cases, we would use SVPN access, but in other cases, that is over kill