Form based login on HTTPS fails with browser error that it couldn't connect the server?

You need to configure Tomcat to use SSL first whenever you'd like to use HTTPS Otherwise you have to remove the transport-guarantee>CONFIDENTIAL.

You need to configure Tomcat to use SSL first whenever you'd like to use HTTPS. Otherwise you have to remove the CONFIDENTIAL entry and fix all links in your HTML/JSP files to point to instead of https://.

Hmm, I don't know if the computer it will be deployed upon is configured for SSL. Also, I am under the impression that it's not secure to use form-based login without the Confidential guarantee. So should I switch back to basic?

– joseph Aug 10 at 4:28 Containers are usually not by default configured for SSL. It requires an admin-provided certificate keystore file. See also the HOWTO link in my answer.

HTTP basic authentication is not more secure than form based authentication. The difference is just that authentication takes place by a bare browser-builtin popup dialogue instead of a HTML form where you've all the control over the look'n'feel. It's really SSL which makes difference in security.

All data is then transferred encrypted over network. – BalusC Aug 10 at 4:30 Isn't basic encrypted with base64, while form is not encrypted at all if not given a transport guarantee? – joseph Aug 10 at 4:32 Base64 is not an encryption.It's just an encoding to ensure that proper characters are been sent (which is reversible without need for a key).

The HTTP basic authentication information is passed as a request header instead of in the POST request body as with a HTML form. Request headers have limited support for allowed characters. – BalusC Aug 10 at 4:34 Looks like I'll just go with the form without the transport guarantee.

Is this super easy to crack, though? – joseph Aug 10 at 4:41.

I cant really gove you an answer,but what I can give you is a way to a solution, that is you have to find the anglde that you relate to or peaks your interest. A good paper is one that people get drawn into because it reaches them ln some way.As for me WW11 to me, I think of the holocaust and the effect it had on the survivors, their families and those who stood by and did nothing until it was too late.