As a user I'd be concerned about entering sensitive information on a web
page where the browser isn't displaying the lock or whatever it displays
to show that the page is https. Even though I could use the browser's
"view source" to see if the form POST is using https or the page has
some disc
I cleaned up the code from my original post and included an actual working
example here. I made some changes such as synchronizing on session, and
combining the two resolution methods - subclasses can provide state if
different resolutions need to be returned. Also, I use googles MapMaker to
expir