• Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

Is CLIENT-CERT a part of servlet spec?

 
Reema Patel
Ranch Hand
Posts: 169
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Is CLIENT-CERT a part of servlet spec? I think it is and supported by all application servers as it is mandated by the servlet specification.

According to my understanding:
BASIC � HTTTP spec
DIGEST- HTTP spec
FORM- servlet spec
CLIENT_CERT � servlet spec

Also, isn't the DIGEST supported by all browsers? A mock exams says �NO�.
Also, FORM auth method according to me used base 64 encoding. Correct me if I'm wrong here.
-Reema
 
Ulf Dittmer
Rancher
Posts: 42969
73
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Several points in no particular order:
  • Whether or not CLIENT_CERT is part of the servlet spec is easy to determine, is it not?
  • FORM auth is just a fancier form of BASIC auth; both use base64-encoding.
  • You're right that DIGEST is not supported by all browsers. It is nonetheless required to be supported by servlet containers.

  •  
    • Post Reply
    • Bookmark Topic Watch Topic
    • New Topic