Re: AW: JSessionId secure attribute not set if RemoteIpFilter with X-Forwarded-Proto https is used

2023-02-15 Thread Ivano Luberti
Hi Reto, fortunately I use RemoteIpValve but I would like to know, if you have time, what advantages there would be using RemoteIpFilter. TIA Il 09/02/2023 08:50, Reto Weiss ha scritto: Hi Mark Reported ashttps://bz.apache.org/bugzilla/show_bug.cgi?id=66471 Regards Reto --

AW: JSessionId secure attribute not set if RemoteIpFilter with X-Forwarded-Proto https is used

2023-02-08 Thread Reto Weiss
Hi Mark Reported as https://bz.apache.org/bugzilla/show_bug.cgi?id=66471 Regards Reto - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Re: AW: JSessionID

2006-01-10 Thread Jess Holle
Bill Barker wrote: "Jess Holle" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] Conveying servlet sessions by SSL session is clearly not required by the spec, though... I'm not sure whether Tomcat supports this... It doesn't (mostly because nobody has been interested enoug

Re: AW: JSessionID

2006-01-09 Thread Bill Barker
"Jess Holle" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > Conveying servlet sessions by SSL session is clearly not required by the > spec, though... > > I'm not sure whether Tomcat supports this... > It doesn't (mostly because nobody has been interested enough to write the cod

RE: AW: JSessionID

2006-01-09 Thread Duan, Nick
implemented as a cookie or using url-rewriting) to access HttpSession even if SSL is turned on. ND -Original Message- From: Jess Holle [mailto:[EMAIL PROTECTED] Sent: Monday, January 09, 2006 12:10 PM To: Tomcat Users List Subject: Re: AW: JSessionID Conveying servlet sessions by SSL session is

Re: AW: JSessionID

2006-01-09 Thread Jess Holle
Conveying servlet sessions by SSL session is clearly not required by the spec, though... I'm not sure whether Tomcat supports this... Bernhard Slominski wrote: Hi, I just looked it up in the spec and there is a 3rd one as well: SSL Sessions From the Servlet spec: "SRV.7.1 Session Trackin

AW: JSessionID

2006-01-09 Thread Bernhard Slominski
Hi, I just looked it up in the spec and there is a 3rd one as well: SSL Sessions >From the Servlet spec: "SRV.7.1 Session Tracking Mechanisms The following sections describe approaches to tracking a user's sessions SRV.7.1.1 Cookies Session tracking through HTTP cookies is the most used session