Markus Schaber wrote:
> Hi, Oliver,
>
> On Fri, 15 Oct 2004 18:28:02 +1300
> Oliver Jowett <oliver@opencloud.com> wrote:
>
>
>>Why exactly would a SSLSocketFactory implementation need to know the
>>original URL?
>
>
> At least, it should know the original hostname for comparison to the one in the
> certificate, to avoid host spoofing.
We already preserve the hostname & port and give them to
SSLSocketFactory.createSocket().
-O