Martin,

I'll go ahead and turn off GPG message signing so you can read this one,
Martin. It appears that you see many of my messages as blank, probably
due to odd handling of mime types by your mail client.

> you can't skip SSL if your browser is speaking it? How does your
> browser speak SSL?

When you use HTTPS, your browser makes an SSL connection to the
appropriate port (usually 443). If the server is not expecting an SSL
connection, communication is impossible.

There is no way to "downgrade" a connection from SSL to non-SSL. I'm
sorry if I used the term "speak" somewhat colloquially: what I really
meant was that your browser is tunneling HTTP through one of the flavors
of SSL that are available to both the browser and the server.

If the browser initiates a connection using SSL, the server must either
successfully establish an encrypted connection or establish no
connection at all.

So, if this guy wants to "skip" the use of HTTPS for his static content
(most likely things such as images, javscript libraries, etc.), he needs
to convince the browser to make a non-SSL connection in the first place.

-chris


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to