Hello There are indeed benefits to using IIS/Apache in front of Tomcat from a usability perspective, but the issue remains that if SSL is not carried out in the application server, there's an unencrypted channel and hence the security conscious have to take additional actions to secure it.
John -- SSO Plugin for BMC Products http://www.javasystemsolutions.com/jss/ssoplugin _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org "Where the Answers Are, and have been for 20 years"

