Cookies, URL rewrting, SSL support

[Maciek Mike]

Hi,

Which of this are true?

Java EE containers must support HTTP cookies.
Java EE containers must support URL rewriting.
Java EE containers must support the Secure Sockets Layer.

[Ankit Garg]

Maciek please Quote Your Sources...

[Maciek Mike]

I found it in 'Head First Servlets and JSP' Page 834 Question 14
It is one of question from final mock exam.

[Chinmaya Chowdary]

Hi, Maciek.

1. Java EE containers must support HTTP cookies.

This is true. By default HTTP is stateless protocol. Inorder to identifies client who participates in session, Java EE container/server must support cookies.

2. Java EE containers must support URL rewriting.

This is wrong. Not must. It is optional. If the container supports url rewriting, adding 'jsessionid:....' to each urls in the application takes time. If the application includes many pages and many of the urls it takes even much time. Dealing with them slows down the application. I think because of this supporting 'url rewriting' for Java EE containers is optional.

3. Java EE containers must support the Secure Sockets Layer.

This is true. Java EE containers guarantees data integrity/confidentiality. If our 'web.xml' includes

    <user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>

and if we made a request to the constrained resourse, container sees the above element and it redirects to the client, turn on the SSL, which is above the Transport layer. And if the client comes up to the server by turning on the SSL(come up with https protocol), then only login form will be sent to the client. This behaviour is guranteed by Java EE containers.

[Maciek Mike]

Thanks for answer