[EMAIL PROTECTED] Unencrypted Channel From Web Server To App Server

2008-03-02 Thread James Ellis
Is it correct to say that in a typical Browser-Apache Web Server-Tomcat App Server setup, the SSL connection generally terminates at the Apache web server and the traffic between Apache and Tomcat (to the AJP connector) is unencrypted? If I am correct that this is the usual setup, then isn't

Re: [EMAIL PROTECTED] Unencrypted Channel From Web Server To App Server

2008-03-02 Thread Sean Allen
On Mar 2, 2008, at 7:20 PM, James Ellis wrote: Inline: Date: Sun, 2 Mar 2008 17:59:00 -0600 From: [EMAIL PROTECTED] To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTED] Unencrypted Channel From Web Server To App Server James Ellis wrote: Is it correct to say that in a typical