On Mon, 29 Mar 2004, Adam Hardy wrote: > I remember seeing Craig's name come up a few times but I guess he must > have missed my posts, or had nothing to say about them. > > My question is basically, why can I no longer use encrypt the form-based > authentication for the container (i.e. SSL / HTTPS) and carry on the > session in unencrypted HTTP afterwards? > > In a nutshell. It seems to be a deliberate feature of the Servlet Spec. > > I have looked into it alot and had work-arounds in place for a while, > but changes in tomcat as new releases come out have also stymied my > work-arounds.
There have been many discussions on this topic, you should try searching for them. A general web search should find things, as well as on newsgroups, and also most likely this mailing list and absolutely certainly the tomcat-user mailing list (archives are both are available). > On 03/29/2004 11:39 AM Sriram N wrote: > > Hi: > > > > There was a lot of activity once, but things seem to have dies out. > > > > What would you like to ask about ? I think Craig McClanahan, one of the Tomcat > > 4 developers has authored the Servlet APIR code too. I'm not sure if he watches > > this list, but he definitely does watch the Tomcat-user list. > > > > -- Sriram > > --- Adam Hardy <[EMAIL PROTECTED]> wrote: > > > >>Hi All > >> > >>what is the general purpose of this list in terms of who discusses what? > >>I have been on the list for a few days now and have only seen 2 support > >>questions come through. > >> > >>I am trying to find the Sun Servlet Specification authors, and Sun > >>actually directed me here. Is this the right place? > >> > >>I spend most of my time on the tomcat and struts lists at jakarta, but > >>I'd appreciate it if someone could direct me to the right place. > >> > >>Thanks > >>Adam > >> > >>-- > >>struts 1.1 + tomcat 5.0.16 + java 1.4.2 > >>Linux 2.4.20 Debian > >> > >>___________________________________________________________________________ > >>To unsubscribe, send email to [EMAIL PROTECTED] and include in the body > >>of the message "signoff SERVLET-INTEREST". > >> > >>Archives: http://archives.java.sun.com/archives/servlet-interest.html > >>Resources: http://java.sun.com/products/servlet/external-resources.html > >>LISTSERV Help: http://www.lsoft.com/manuals/user/user.html > > > > > > > > __________________________________ > > Do you Yahoo!? > > Yahoo! Finance Tax Center - File online. File on time. > > http://taxes.yahoo.com/filing.html > > > > ___________________________________________________________________________ > > To unsubscribe, send email to [EMAIL PROTECTED] and include in the body > > of the message "signoff SERVLET-INTEREST". > > > > Archives: http://archives.java.sun.com/archives/servlet-interest.html > > Resources: http://java.sun.com/products/servlet/external-resources.html > > LISTSERV Help: http://www.lsoft.com/manuals/user/user.html > > > > > -- > struts 1.1 + tomcat 5.0.16 + java 1.4.2 > Linux 2.4.20 Debian > > ___________________________________________________________________________ > To unsubscribe, send email to [EMAIL PROTECTED] and include in the body > of the message "signoff SERVLET-INTEREST". > > Archives: http://archives.java.sun.com/archives/servlet-interest.html > Resources: http://java.sun.com/products/servlet/external-resources.html > LISTSERV Help: http://www.lsoft.com/manuals/user/user.html > Milt Epstein Research Programmer Integration and Software Engineering (ISE) Campus Information Technologies and Educational Services (CITES) University of Illinois at Urbana-Champaign (UIUC) [EMAIL PROTECTED] ___________________________________________________________________________ To unsubscribe, send email to [EMAIL PROTECTED] and include in the body of the message "signoff SERVLET-INTEREST". Archives: http://archives.java.sun.com/archives/servlet-interest.html Resources: http://java.sun.com/products/servlet/external-resources.html LISTSERV Help: http://www.lsoft.com/manuals/user/user.html