wood burning stoves 2.0*
The moose likes Web Component Certification (SCWCD/OCPJWCD) and the fly likes Is CLIENT-CERT a part of servlet spec? Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login

Win a copy of Android Security Essentials Live Lessons this week in the Android forum!
JavaRanch » Java Forums » Certification » Web Component Certification (SCWCD/OCPJWCD)
Bookmark "Is CLIENT-CERT a part of servlet spec?" Watch "Is CLIENT-CERT a part of servlet spec?" New topic

Is CLIENT-CERT a part of servlet spec?

Reema Patel
Ranch Hand

Joined: Jan 26, 2006
Posts: 169
Is CLIENT-CERT a part of servlet spec? I think it is and supported by all application servers as it is mandated by the servlet specification.

According to my understanding:
FORM- servlet spec
CLIENT_CERT � servlet spec

Also, isn't the DIGEST supported by all browsers? A mock exams says �NO�.
Also, FORM auth method according to me used base 64 encoding. Correct me if I'm wrong here.
Ulf Dittmer

Joined: Mar 22, 2005
Posts: 41124
Several points in no particular order:
  • Whether or not CLIENT_CERT is part of the servlet spec is easy to determine, is it not?
  • FORM auth is just a fancier form of BASIC auth; both use base64-encoding.
  • You're right that DIGEST is not supported by all browsers. It is nonetheless required to be supported by servlet containers.

  • Ping & DNS - my free Android networking tools app
    I agree. Here's the link: http://aspose.com/file-tools
    subject: Is CLIENT-CERT a part of servlet spec?
    Similar Threads
    DIGEST authentication type
    manning's question about AUTHENTICATION mechanisms
    About authentication mechanisms
    Doubt in auth methods