Re: isTLS (WG last call on the Java API)

[Rob Weltman <robw@coscend.com>]

"Kurt D. Zeilenga" wrote:
> 
> >4.6.30 isTLS
> >
> >   public boolean isTLS ()
> >
> >   Indicates if the connection uses TLS, i.e. startTLS has completed.
> 
> StartTLS can successful complete but TLS may not be establish.
> 
> Hence, a better description would be "Indicates the session
> is currently protected by TLS."  I would note that as the
> method provides no indication of the level of protection
> provided (which could be nil or near nil), a security
> consideration should be noted to warn users of inappropriate
> use of the method.

OK