Hi all, I'm new to this list so please excuse me if this question has been asked. I was wondering what the spec behaviour for handling realm protection across protocols is?
For example, I have declared http://mysite:8080/foo/bar.jsp is my welcome page, and /foo is protected using form based auth. using /login.jsp. If I goto https://mysite:8443/login.jsp, then log in normally, it should attempt to direct me to http://mysite:8080/foo/bar.jsp yes? If so, should the realm protection be carried over from when I logged in using the https login page? Thanks in advance, Minh ___________________________________________________________________________ To unsubscribe, send email to [EMAIL PROTECTED] and include in the body of the message "signoff SERVLET-INTEREST". Archives: http://archives.java.sun.com/archives/servlet-interest.html Resources: http://java.sun.com/products/servlet/external-resources.html LISTSERV Help: http://www.lsoft.com/manuals/user/user.html