Re: FORM-based authentication idea

[Christopher Cain]

Christopher Cain wrote:
> 
> My main objection would be that it is adding
> non-spec features, which means that any apps
> written under Tomcat would not cleanly port
> to other spec-compliant servlet containers.

This, of course, should read: Any apps written under Tomcat "to levarage
this feature" would not port cleanly. Basically, it encourages
developers to code outside of the spec. If they relied on their own
custom tags to do the job, then they just transplant their custom
web.xml.