[Date Prev][Date Next] [Chronological] [Thread] [Top]

isTLS (WG last call on the Java API)



>4.6.30 isTLS
>
>   public boolean isTLS ()
>
>   Indicates if the connection uses TLS, i.e. startTLS has completed.

StartTLS can successful complete but TLS may not be establish.

Hence, a better description would be "Indicates the session
is currently protected by TLS."  I would note that as the
method provides no indication of the level of protection
provided (which could be nil or near nil), a security
consideration should be noted to warn users of inappropriate
use of the method.