SocketFactory property duplication
Cantor, Scott
cantor.2 at osu.edu
Wed May 24 21:27:35 EDT 2017
Brent, please review [1] when you have a moment, especially the warnings and suggestions around the way to apply these features to the system.
I couldn't come up with a good way to really explain this other than to suggest that the best thing is to configure it to fail deliberately and then flip the right switch to fix it. Otherwise it seems pretty risky to set up because once you toggle on the special SocketFactory, you leave the client wide open if there's no TrustEngine applied by the object using the client.
-- Scott
[1] https://wiki.shibboleth.net/confluence/display/IDP30/HttpClientConfiguration
More information about the dev
mailing list