Wiring HTTP client security in Spring

[Cantor, Scott]

> TLS on the MDQ server could span a range of options:
> 
> 1) CA-signed TLS certificate rooted in a commercial CA
> 2) Self-signed TLS certificate
> 3) CA-signed TLS certificate rooted in a private CA
> 
> All else being equal, I personally prefer #3 but the characteristics
> of the deployment will determine the optimal choice.

Right, and ideally all of them should be configured with essentially one declaration of a certificate (either the end entity or the CA(s)).

-- Scott