Denial of service via incomplete network protection

Uncontrolled resource consumption in Apache Tomcat EncryptInterceptor documentation allows remote attackers to interrupt clustering over untrusted networks. The documentation incorrectly claimed that EncryptInterceptor made clustering safe on an untrusted network, although its confidentiality and integrity controls do not prevent denial-of-service traffic. The condition requires clustering to rely on EncryptInterceptor across an untrusted network; the documented impact is service interruption rather than data disclosure or modification.