An interesting point:
Q: Unicast discovery can use JERI-SSL Endpoint's but is not subject to
the unmarshalling attack, why not?
A: It doesn't use unmarshalling, instead, the connection is
authenticated before the proxy is downloaded. Discovery code already
knows the interface to expect:
Okay, as a simple point, I am ultimately focused on how to get a LookupLocator
to produce a ServiceRegistrar using something different that the existing
UniCast mechanism. What I'm focused on, in thought, is just an implementation
of that interface being created. When you look at the