Torsten Foertsch wrote:
On Tue 16 Sep 2008, Rick Yorgason wrote:
There is a major drawback in that approach as with allowing SSL
renegotiation in general. You cannot deploy large POST requests.
Unfortunately, if POST requests are hampered, then it's really not going
to be useful
Hi everyone,
Here's the challenge I'm trying to solve. I'd like to use the
SSLVerifyClient directive to offer better security to users who know
about client certificates, but only for users who opt in to the extra
security.
To make matters more difficult, I'd like to use the same URLs for m
