This week's book giveaway is in the OO, Patterns, UML and Refactoring forum.
We're giving away four copies of Refactoring for Software Design Smells: Managing Technical Debt and have Girish Suryanarayana, Ganesh Samarthyam & Tushar Sharma on-line!
See this thread for details.
The moose likes Web Component Certification (SCWCD/OCPJWCD) and the fly likes Is CLIENT-CERT a part of servlet spec? Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login

JavaRanch » Java Forums » Certification » Web Component Certification (SCWCD/OCPJWCD)
Bookmark "Is CLIENT-CERT a part of servlet spec?" Watch "Is CLIENT-CERT a part of servlet spec?" New topic

Is CLIENT-CERT a part of servlet spec?

Reema Patel
Ranch Hand

Joined: Jan 26, 2006
Posts: 169
Is CLIENT-CERT a part of servlet spec? I think it is and supported by all application servers as it is mandated by the servlet specification.

According to my understanding:
FORM- servlet spec
CLIENT_CERT � servlet spec

Also, isn't the DIGEST supported by all browsers? A mock exams says �NO�.
Also, FORM auth method according to me used base 64 encoding. Correct me if I'm wrong here.
Ulf Dittmer

Joined: Mar 22, 2005
Posts: 42958
Several points in no particular order:
  • Whether or not CLIENT_CERT is part of the servlet spec is easy to determine, is it not?
  • FORM auth is just a fancier form of BASIC auth; both use base64-encoding.
  • You're right that DIGEST is not supported by all browsers. It is nonetheless required to be supported by servlet containers.

    I agree. Here's the link:
    subject: Is CLIENT-CERT a part of servlet spec?
    It's not a secret anymore!