tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From cmanola...@yahoo.com
Subject Re: Tomcat startup time
Date Tue, 15 Aug 2000 18:22:32 GMT
> > It can be delayed until the first session is created. 
> > Or it can be done in a separate thread ( and all session creation will
> > wait for this to complete). 
> > 
> > Of course, server.xml option is great too.
> > 
> > Costin
> > 
> 
> doing it in server.xml as an option is IMHO far more convenient. i'd
> rather have a simple option RandomGenerator = Normal/Secure or
> something similar. I'd rather have this as default set on secure since
> i've seen the effects of having sessions cracked (and the effects of the
> security flaw in tomcat previously which used an insecure method which had
> an exploit posted).

The other 2 options allow to allways use secure, but remove the annoying
startup delay.

Costin 


Mime
View raw message