Wiring HTTP client security in Spring

[Cantor, Scott]

> 3) Immediately after you invoke the client execute(), invoke the support
> method that sanity checks that the TLS trust engine eval was actually done, if
> applicable, like so:
> 
> HttpResponse response = httpClient.execute(request, context);
> HttpClientSecuritySupport.checkTLSCredentialEvaluated(context,
> request.getURI().getScheme());

Speaking of..

Does it short-circuit the call to the server if the TLS validation fails? If not, that renders it kind of moot, you've already given it the data.

-- Scott