omer wrote:I am designing a client/server application in java
Server will read/write data to n from the Mysql db...
Client (apps) can connect to the server and retrieve/post data.
Now my question is..
for authentication: should i use SSL/SSH why n why not?
you can use ssl for authentication only if you give out client certificates to all your users.
you can't use ssh for web site authentication. the fact that you mention ssh implies that you don't know what ssh is. please read up on stuff before posting buzzwords.
do i even need tomcat?
you can do it all using cgi scripts, php, mod_perl, etc. you don't need java.