https://issues.apache.org/bugzilla/show_bug.cgi?id=47433
--- Comment #11 from Jagadesh Munta <[email protected]> 2009-07-07 11:15:45 PST --- Martijn, The following are the responses that I got from JDK folks:- --- Michael McMahon wrote: > Another problem is the API itself. > > HttpsURLConnection is a sub-class of HttpURLConnection and when you open > a URL, you get one or the other depending on the original URL type. But you > can't change > the object's type, after a redirect. > > So, the only way to do redirection between http and https is to disable > automatic handling > and do it manually in the application. > > - Michael. > > Jean-Christophe Collet wrote: >> From the top of my head (it was a long time ago), the HTTP specs used for >> HttpURLConnection at the specified that automatic redirection should only >> occur when the protocol stayed the same. i.e. from http to http, or https >> to https. >> This is pretty obvious in the case of forbidding https to http redirection, >> a bit less the other way around. >> Basically that kind of change should not be transparent to the user or/and >> application. >> So the decision to allow this or not had to be differed to the application. >> >> After that, it's a matter of backward compatibility. ----- -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug.
