Place a transport-guarantee element in your web.xml, thus: | <security-constraint> | <web-resource-collection> | <web-resource-name>All resources</web-resource-name> | <url-pattern>/YOUR_PATH</url-pattern> | </web-resource-collection> | <user-data-constraint> | <transport-guarantee>CONFIDENTIAL</transport-guarantee> | </user-data-constraint> | </security-constraint> | in the above replace YOUR_PATH with the appropriate value for your case. -Stathis View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4144405#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...