Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have two web application related questions:

i) If a web application contains two servlets and a customer accesses these two servlets using proper URLs, how many sessions are created? One or two?

ii) Could one use HTTPS for one servlet and not for the other? Does this make sense?

Thanks!

share|improve this question
add comment

1 Answer

up vote 0 down vote accepted

i) If a web application contains two servlets and a customer accesses these two servlets using proper URLs, how many sessions are created? One or two?

One customer always creates one session to the web application with one browser - so whether he accesses one servlet or many, they are all part of the same HttpSession - until the session times out. i.e. idle time

ii) Could one use HTTPS for one servlet and not for the other? Does this make sense?

Yes you can can configure the url-pattern for https to include one servlet and keep the other outside of it, that is absolutely possible - but it depends on the sensitivity of your page. the usual rule-of-thumb some follow is, if you have any page which is sensitive enough for https, then why not the whole app on https.

share|improve this answer
    
> if you have any page which is sensitive enough for https, then why not the whole app on https -> Some people might argue about performance... –  JVerstry Jan 29 '11 at 17:59
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.