Return-Path: 
 <tomcat-user-return-15374-qmlist-jakarta-archive-tomcat-user=jakarta.apache.org@jakarta.apache.org>
Delivered-To: apmail-jakarta-tomcat-user-archive@apache.org
Received: (qmail 84291 invoked from network); 2 Apr 2002 07:41:03 -0000
Received: from unknown (HELO nagoya.betaversion.org) (192.18.49.131)
  by daedalus.apache.org with SMTP; 2 Apr 2002 07:41:03 -0000
Received: (qmail 12174 invoked by uid 97); 2 Apr 2002 07:40:57 -0000
Delivered-To: qmlist-jakarta-archive-tomcat-user@jakarta.apache.org
Received: (qmail 12158 invoked by uid 97); 2 Apr 2002 07:40:57 -0000
Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
List-Subscribe: <mailto:tomcat-user-subscribe@jakarta.apache.org>
List-Help: <mailto:tomcat-user-help@jakarta.apache.org>
List-Post: <mailto:tomcat-user@jakarta.apache.org>
List-Id: "Tomcat Users List" <tomcat-user.jakarta.apache.org>
Reply-To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
Delivered-To: mailing list tomcat-user@jakarta.apache.org
Received: (qmail 12147 invoked from network); 2 Apr 2002 07:40:56 -0000
Subject: AW: AW: sessions, security, and the RFCs
Date: Tue, 2 Apr 2002 09:40:48 +0200
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-2022-jp"
Content-Transfer-Encoding: 7bit
Message-ID: <C19D2E05B25FA94E943431666541E5B7FC4C@server01.hh.uptime.de>
X-MS-Has-Attach: 
X-MimeOLE: Produced By Microsoft Exchange V6.0.4712.0
X-MS-TNEF-Correlator: 
content-class: urn:content-classes:message
Thread-Topic: AW: sessions, security, and the RFCs
Thread-Index: AcHWHKXqalDWAU3PQDedW6v2zwbJtgD+8qbA
From: "Ralph Einfeldt" <ralph.einfeldt@uptime-isc.de>
To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N

As I understand it, the spec doesn't say much about the
session bahaviour in this scenario.

So it's quite legal that different containers implement
opposite behaviours for the switch between http and https.

It would be nice to hear what one of the gurus has to say
about this topic ?

> -----Ursprungliche Nachricht-----
> Von: Manuel Mall [mailto:MM@arcus.com.au]
> Gesendet: Donnerstag, 28. Marz 2002 06:53
> An: 'Tomcat Users List'
> Betreff: RE: AW: sessions, security, and the RFCs
<snip/>
> Why does Tomcat 4 implement a different session behaviour 
> than Tomcat 3.3 if they are both based on essentially the 
> same specification?
<snip/>

--
To unsubscribe:   <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
For additional commands: <mailto:tomcat-user-help@jakarta.apache.org>
Troubles with the list: <mailto:tomcat-user-owner@jakarta.apache.org>