servlet security

[sitaram irrinki]

what are the methods supported by servlet to attain
security

[Leandro Melo]

You mean http methods, api methods or methods in the sense of "strategies"?

[Adeel Ansari]

- Basic Authentication
- Digest Authentication
- Form-Based Authentication
- SSL and Client Certificate Authentication

[Leandro Melo]

Originally posted by Adeel Ansari:
- Basic Authentication
- Digest Authentication
- Form-Based Authentication
- SSL and Client Certificate Authentication

Just one observation here.
Digest mode is NOT required by the spec, so you may find containers that do NOT implement it.
Additionally, although Client Certificate is required, the spec doesn't say that SSL must be used (actually, most containers use SSL for that, but it's NOT a requirement).