On 20/03/2024 06:22, Mircea Butmalai wrote: <snip/>
Questions are: 1. Is Jakarta Authentication specification going to replace the authentication part of Jakarta Servlet specification?
Unlikely.
2. Are current authenticatiors from Tomcat (FORM, SPNEGO, SSL, HTTP DIGEST, HTTP BASIC, SSO) going to be implemented as Jakarta Authentication providers in future versions of Tomcat?
This has been discussed in the past but there is little motivation to do so as there are no obvious benefits and possible negative performance impacts.
3. Is any effort to introduce in Jakarta standards + Tomcat an authentcator of type 2FA?
No plans I am aware of. Mark --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org