The current mechanism for handling redirects is broken. Right now,
HotJava uses a sun.* api to turn off redirection on each connection
it makes itself so that it can handle it in a way that propagates
cookies. However, connections made on behalf of HotJava (like images,
applets, etc.) don't get HotJava's redirection handling. Also, redirection
to other protocols (http to ftp, http to https) don't work as a
result of this.

Either future JDK's need to handle redirection better, or a mechanism
should exist where an application can hook itself in to manage
redirection itself. (Or both!)