RE: Protocol should determine confidentiality of Request

2008-10-24 Thread Jerome Louvel
://www.restlet.org Noelios Technologies ~ Co-founder ~ http://www.noelios.com/ http://www.noelios.com _ De : Rob Heittman [mailto:[EMAIL PROTECTED] Envoyé : mercredi 22 octobre 2008 15:23 À : discuss@restlet.tigris.org Objet : Re: Protocol should determine confidentiality of Request That's

RE: Protocol should determine confidentiality of Request

2008-10-22 Thread Jerome Louvel
://www.restlet.org Noelios Technologies ~ Co-founder ~ http://www.noelios.com/ http://www.noelios.com _ De : Kevin Conaway [mailto:[EMAIL PROTECTED] Envoyé : mardi 21 octobre 2008 23:16 À : discuss@restlet.tigris.org Objet : Re: Protocol should determine confidentiality of Request

Re: Protocol should determine confidentiality of Request

2008-10-22 Thread Kevin Conaway
Technologies ~ Co-founder ~ http://www.noelios.com -- *De :* Kevin Conaway [mailto:[EMAIL PROTECTED] *Envoyé :* mardi 21 octobre 2008 23:16 *À :* discuss@restlet.tigris.org *Objet :* Re: Protocol should determine confidentiality of Request In Restlet-619, I added SSL

Re: Protocol should determine confidentiality of Request

2008-10-22 Thread Rob Heittman
Repeating, it's important on the server side. I have a lot of code that depends on examining this. This way the code does not have to explicitly check stuff like ( protocol.equals(Protocol.HTTPS) || protocol.equals(Protocol.RIAP) || ... ) and possibly leave out a confidential communication

Re: Protocol should determine confidentiality of Request

2008-10-22 Thread Rob Heittman
That's perfectly fine by me. On Wed, Oct 22, 2008 at 8:58 AM, Jerome Louvel [EMAIL PROTECTED]wrote: Hi Rob, What could be possible is to have a Message#isConfidential() method that would directly test the request's protocol. We would deprecate the Request#setConfidential() method as we

Re: Protocol should determine confidentiality of Request

2008-10-22 Thread Kevin Conaway
Ah, I had neglected to consider people using that field outside of the Restlet modules. On Wed, Oct 22, 2008 at 8:39 AM, Rob Heittman [EMAIL PROTECTED]wrote: Repeating, it's important on the server side. I have a lot of code that depends on examining this. This way the code does not have to

Protocol should determine confidentiality of Request

2008-10-21 Thread Kevin Conaway
When making a Client call, I think it would be helpful to set the confidential attribute on the Request for the user based on the Protocol. I.e., if I'm using the HTTPS protocol, I shouldn't have to remember to set the confidential attribute to true on every Request. I'm not where the best place

Re: Protocol should determine confidentiality of Request

2008-10-21 Thread Rob Heittman
Not disagreeing -- makes sense -- but just curious, how/when do you use this on the Client side? The Server side sets this if the request has come in via https: or riap:, and that's where I usually need to interrogate it. On Tue, Oct 21, 2008 at 8:56 AM, Kevin Conaway [EMAIL PROTECTED]wrote: