[
https://issues.apache.org/jira/browse/HTTPCLIENT-2358?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18117711#comment-18117711
]
Oleg Kalnichevski commented on HTTPCLIENT-2358:
-----------------------------------------------
[~stoty] As also mentioned in
[https://github.com/apache/httpcomponents-client/pull/615] I am no longer in
favor of inclusion of SPNEGO authentication into HttpClient code base given it
would considerably increase our vulnerability profile.
I propose SPNEGO auth scheme be released as a separate artifact from an
independent project and HttpClient promotes it as a companion project. Once the
project is mature enough we can revisit the idea of its incorporation into
HttpClient.
Oleg
> Implement a mutual authentication capable SPNEGO scheme
> -------------------------------------------------------
>
> Key: HTTPCLIENT-2358
> URL: https://issues.apache.org/jira/browse/HTTPCLIENT-2358
> Project: HttpComponents HttpClient
> Issue Type: Sub-task
> Reporter: Istvan Toth
> Priority: Major
> Time Spent: 13h 50m
> Remaining Estimate: 0h
>
> The required API and authentication logic changes have been merged, it is now
> possible to add an implementation which supports mutual authentication for
> better security.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
