Thanks for the explanation -- I'll take a close look at this strategy.
BTW, regarding...
I do NOT think it is a good idea to make *everything* accessible on all three ports.
I agree with your logic for a scenario which separates Admin/Login/Normal access, but unfortunately we do need to make everything accessible on all three ports.
Here's why:
90% of our thin-client apps are installed in retail stores who DO allow communication through port 80
... but about 5% of the stores only allow communiation through 443
... and the other 5% will only allow 8080.
(And no matter how hard we've tried to get the 443 and 8080 stores to allow port 80, they are either unwilling or the decision making process has to go through so many executive channels that it could take over a year to get a *possible* approval.)
-Peter