Hi, Oliver,
On Fri, 15 Oct 2004 18:28:02 +1300
Oliver Jowett <oliver@opencloud.com> wrote:
> Why exactly would a SSLSocketFactory implementation need to know the
> original URL?
At least, it should know the original hostname for comparison to the one in the
certificate, to avoid host spoofing.
Markus
--
markus schaber | dipl. informatiker
logi-track ag | rennweg 14-16 | ch 8001 zürich
phone +41-43-888 62 52 | fax +41-43-888 62 53
mailto:schabios@logi-track.com | www.logi-track.com