Hi, Quoting Paul Fremantle <[EMAIL PROTECTED]>:
Firstly you might want to have this discussion on a Rampart list - it might get more involvement from real sec experts.
Sorry !!! I have both on the same mailbox, and sometimes I forgot to post in the right list!!! Sorry!!!
My question is why do you need to write your own HTTPClient? I thought we already supported SSL/TLS.
And how can I support SSLv3 with hostname verification, with the STSClient? Thank you, Massimiliano ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.