• Post Reply Bookmark Topic Watch Topic
  • New Topic

Is CLIENT-CERT a part of servlet spec?

 
Reema Patel
Ranch Hand
Posts: 169
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Is CLIENT-CERT a part of servlet spec? I think it is and supported by all application servers as it is mandated by the servlet specification.

According to my understanding:
BASIC � HTTTP spec
DIGEST- HTTP spec
FORM- servlet spec
CLIENT_CERT � servlet spec

Also, isn't the DIGEST supported by all browsers? A mock exams says �NO�.
Also, FORM auth method according to me used base 64 encoding. Correct me if I'm wrong here.
-Reema
 
Ulf Dittmer
Rancher
Posts: 42970
73
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Several points in no particular order:
  • Whether or not CLIENT_CERT is part of the servlet spec is easy to determine, is it not?
  • FORM auth is just a fancier form of BASIC auth; both use base64-encoding.
  • You're right that DIGEST is not supported by all browsers. It is nonetheless required to be supported by servlet containers.

  •  
    Gravity is a harsh mistress. But this tiny ad is pretty easy to deal with:
    the new thread boost feature: great for the advertiser and smooth for the coderanch user
    https://coderanch.com/t/674455/Thread-Boost-feature
    • Post Reply Bookmark Topic Watch Topic
    • New Topic
    Boost this thread!