Name: rmT116609 Date: 08/20/2003


A DESCRIPTION OF THE REQUEST :
Currently support for client authentication using a certificate is not present in JWS. If a web server hosting the application is configured to require a client certificate JWS fails downloading the application reporting HTTP 403 error.

JUSTIFICATION :
Not having this feature prevents downloading applications from strongly protected servers. Using basic HTTP authentication brings in a security risk.

EXPECTED VERSUS ACTUAL BEHAVIOR :
EXPECTED -
A mechanism for storing and managing personal certificates is needed. JWS should behave the same way as browsers do in similar situations.
(Incident Review ID: 189857)
======================================================================