https://bz.apache.org/bugzilla/show_bug.cgi?id=57830
--- Comment #2 from Christopher Schultz <ch...@christopherschultz.net> --- +1 to adding this enhancement. Without this feature, AWS ELB won't send anything about an ELB-terminated TLS connection through to the server except for the protocol (e.g. TLSv1) and the remote client's IP address. That means you can't do client certificates, further-validate cipher strength, etc. As for the difference between the recently-added SNI code, is it not possible to read a block of data and then discard some of it (after taking-out the relevant data, of course) before passing it down the chain to the SSL handshake processor? -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org