actually, I'm not about to work with SSL & HTTPS cause I'm working on a web app. with average and over security to authenticate users to let them access authorized resources and also your opinion while I'm using JBOSS, Hibernate, Struts.