jsr340-experts@servlet-spec.java.net

[jsr340-experts] Re: Fwd: Re: HttpSession#isSecure ?

From: Shing Wai Chan <shing.wai.chan_at_oracle.com>
Date: Thu, 25 Aug 2011 12:28:35 -0700

Suppose no cookie is allowed.
And we would like to encode a http URL.
Web container may like to know whether the session is secure or not
before appending jsessionid parameter.

Shing Wai Chan

>
> -------- Original Message --------
> Subject: [jsr340-experts] Re: HttpSession#isSecure ?
> Date: Thu, 25 Aug 2011 10:25:40 +0100
> From: Mark Thomas <markt_at_apache.org>
> Reply-To: jsr340-experts_at_servlet-spec.java.net
> To: jsr340-experts_at_servlet-spec.java.net
>
>
>
> On 25/08/2011 02:06, Shing Wai Chan wrote:
> > One can check whether a cookie or request is secure by invoking isSecure().
> > I propose to add the following to interface javax.servlet.http.HttpSession
> > public boolean isSecure();
> >
> > This will allow us to check whether a session is created through http or
> > https.
> > Any comment?
>
> What is the use case?
>
> Mark