[whartung]

TLS is supplied by the underlying JDK, which has been 1.3 for some time. How is HttpsServer not 1.3?

[wpollock]

Not sure, but the API docs say 1.2. Maybe the com.sun packages include their own implementation of TLS, separate from the TLS used in the rest of the JRE.