Mark Castillo at [EMAIL PROTECTED] wrote:
> 
> Right now we've integrated Acme server (and integrated https and login
> session support ourselves, which was a royal pain). So, I'm trying to figure
> out if we want to continue maintaining (fixing/rewriting?) the Acme server
> or scrap it and go to something else. We want code that is small enough to
> audit (for security), but functional enough to support servlets and secure
> sessions.

Well... Then Embedded in Tomcat 4.0 (yes, o.a stands for org.apache)... You
can basically strip-out all the functionality you don't want from the
standard TC4.0), implement (maybe) your own logger and session manager, and
with a handful of classes, you're set...

    Pier

Reply via email to