<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Tino Wildenhain wrote:
<blockquote cite="mid43D87078.8090002@wildenhain.de" type="cite">
<pre wrap="">michael nt milne schrieb:
</pre>
<blockquote type="cite">
<pre wrap="">Yes I agree, having checked on basic http authentication I need SSL.
Basic http and cookie auth is insecure. I just feel that zope should
have this facility even with a self signed certificate, so that you
could do it without Apache and had more options. The option to even
just have it on for site logon would be good.
</pre>
</blockquote>
<pre wrap=""><!---->
Yes you can do that. There are patches to use SSL directly w/ the
ZServer. But usually its by far not worth the trouble. Apache or
pound as frontend proxy are easy to setup and ease management
and load balancing.
_
</pre>
</blockquote>
Tino + 1<br>
<br>
And heres a link to info re: ZopeSSL setup:<br>
<br>
<a class="moz-txt-link-freetext" href="http://www.zope.org/Members/Ioan/ZopeSSL">http://www.zope.org/Members/Ioan/ZopeSSL</a><br>
<br>
I moved to Apache (for SSL) because its independent of Zope and it
will give you SSL and the power of a world class server when you need
it. ZopeSSL worked fine (when i last tried it, like zope 2.4x).<br>
<br>
David<br>
<br>
<br>
<br>
<br>
</body>
</html>