Thank you for the quick reply.
The way you that describe it working sounds very plausible.
I'm new to this, so perhaps my approach is flawed, but I would expect to be able to make the initial request for the IOR over SSL. (Why not?)
Is there some way that GlassFish can be configured to listen on an SLL port for such requests?
I have tried setting 'security' on 3700 using the admin screen, but didn't get very far.
If that could be made to work then I guess the obvious next question is: how then would I tell the client make the initial request over SSL?
It seems odd that I can't encrypt the full traffic. Surely this is possible?
[Message sent by forum member 'ajvok' (ajvok1_at_gmail.com)]
http://forums.java.net/jive/thread.jspa?messageID=389606