tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Caldarale, Charles R" <Chuck.Caldar...@unisys.com>
Subject RE: Context Path for a subdirectory
Date Sat, 01 Dec 2012 01:08:54 GMT
> From: Leo Donahue - RDSA IT [mailto:LeoDonahue@mail.maricopa.gov] 
> Subject: RE: Context Path for a subdirectory

> I considered the security constraint, but wouldn't that have required me 
> to set up SSL (for a secure user/password submittal) and get someone to 
> pay for a public certificate - which would probably not happen.

No, SSL is not required (that's called transport guarantee in the spec).  However, not using
it means that the credentials could be sniffed by anyone with access to the wire.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus
for use only by the intended recipient. If you received this in error, please contact the
sender and delete the e-mail and its attachments from all computers.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message