You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tomcat.apache.org by bu...@apache.org on 2002/04/07 20:46:28 UTC

DO NOT REPLY [Bug 7819] New: - https and http session-semantics control

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=7819>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=7819

https and http session-semantics control

           Summary: https and http session-semantics control
           Product: Tomcat 4
           Version: 4.0.2 Final
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Enhancement
          Priority: Other
         Component: Unknown
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: anders.rundgren@telia.com


Many people are using https for an authentication form and then for performance 
reasons reverting to http.  Although not an ideal way of doing things it should 
IMO be supported as an option.  Exactly what this means for the Tomcat 
internals, is outside of my competence but at least the &Secure cookie 
extension should be affected.  This should be a configuration setting that 
default supports the security needs of the servlet specification, but allows 
this to be changed.

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>