> I'd like to see server and browsers supporting RFC 2817 also, but > I seem to rememeber that when it was raised on Mozilla's bugzilla there > wasn't much support for it... and there are issues with is, see > discussion of it on the Apache site [1]: > > - Upgrading to TLS Within HTTP/1.1 > http://www.ietf.org/rfc/rfc2817.txt There is mod_gnutls for apache from the folks at outoforder.cc, http://www.outoforder.cc/projects/apache/mod_gnutls/ but it's reasonably new and not quite ready for production yet. It will not play nicely with mod_ssl, so it's an either or type deal. They have a number of other excellent apache modules there, my personal favorite being mod_log_sql. Anyway, enough plugging them. -- Jim Perrin System Architect - UIT Ft Gordon & US Army Signal Center