> Make me a favour, switch to mod_jk and ajp13 which is faster and
> support much more servers (Apache, IIS, IPlanet/NES, jni).
>
> And that the part of the connector area which is the more activelly
> maintained.
What's unfortunate, though, is that it doesn't grab ALL of the SSL
environment variables, and it's missing one I think is a critical one,
SSL_CIPHER_USEKEYSIZE, because that one tells you whether someone is coming
in with a weak or strong keysize. It's often important to know whether 40,
56 or 128 bits are being used, especially for a site that wants to ensure
strong encryption is being used to prevent eavesdroppers from hacking
passcodes and the like.
David
