Also, just to say that I did a test on only letting authenticated and managers view the root page of the site over ssl. If you just cancelled the login box or closed it, the whole front page was displayed without any css but you could still get all the content. I've had this quite a bit before so that's why I'm looking into Apache authentication. I just don't think that Zope authentication is secure.
<br><br><div><span class="gmail_quote">On 2/7/06, <b class="gmail_sendername">michael nt milne</b> <<a href="mailto:michael.milne@gmail.com">michael.milne@gmail.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Also I'm implementing an extranet solution where extra security is<br>required-so therefore an apache login and a further plone login for<br>editing the site.<br><br>On 2/7/06, michael nt milne <<a href="mailto:michael.milne@gmail.com">
michael.milne@gmail.com</a>> wrote:<br>> Sorry but there's alot of Apache knowledge here and it's completely<br>> relevant. Also Zope doesn't do SSL well and all password - login is<br>> basically insecure! I've found out that I'm best using
httpd.conf and<br>> not htaccess . Also irc.freenode is unusable.<br>><br>> On 2/7/06, Chris Withers <<a href="mailto:chris@simplistix.co.uk">chris@simplistix.co.uk</a>> wrote:<br>> > michael nt milne wrote:
<br>> > > I've managed to set-up SSL over Apache and Zope/Plone virtual hosts on<br>> > > Windows but am slightly stuck on implementing the htaccess part of my<br>> > > solution. I've done extensive googleing but can't seen to find any
<br>> solid<br>> > > documentation.<br>> ><br>> > This is an Apache question, go ask on #apache on <a href="http://irc.freenode.net">irc.freenode.net</a>!<br>> ><br>> > I really don't understand why you'd use htaccess is you're already using
<br>> > Zope...<br>> ><br>> > cheers,<br>> ><br>> > Chris<br>> ><br>> > --<br>> > Simplistix - Content Management, Zope & Python Consulting<br>> > -
<a href="http://www.simplistix.co.uk">http://www.simplistix.co.uk</a><br>> ><br>> ><br>><br>><br>> --<br>> Michael<br>><br><br><br>--<br>Michael<br></blockquote></div><br><br clear="all"><br>--
<br>Michael