[jboss-jira] [JBoss JIRA] (AS7-4623) LogoutHandler.java misspells the referer header

[ https://issues.jboss.org/browse/AS7-4623?page=com.atlassian.jira.plugin.s... ] Jason Greene commented on AS7-4623: ----------------------------------- What darren is referring to is that form auth requires sending passwords in the clear, so without SSL by default (which we dont do out of the box since that requires certs be configured), then our out of the box mechanism would be sending passwords in the clear the second they change the management bind address to a public interface. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira