[Zope-dev] Re: [patch] More secure cookie crumbler?

Stuart Bishop stuart at stuartbishop.net
Sat Apr 17 00:17:35 EDT 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On 13/04/2004, at 3:34 PM, Tres Seaver wrote:

> I haven't looked at the code.  Do you have actual experience using 
> core sessions over ZEO?  I pondered that recently for a client, and 
> fell back to using a hacked together version of Anthony Baxter's 
> SQLSession product, instead.

No experience unfortunately, although I do use sessions stored in
the ZODB rather than temporary storage. I would consider it a bug
if it didn't work :-) Performance may be an issue depending on
how you use your SESSIONs of course which I suspect would be the
major issue with doing this.

> SessionStorage would work either as a separate product, or as a knob 
> for the CookieCrumbler, I think.  If ZPL is an adequate license, why 
> don't you check it in there?

I've checked a version into Products/CookieCrumber and added a note
to the CHANGES.txt

- --  
Stuart Bishop <stuart at stuartbishop.net>
http://www.stuartbishop.net/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (Darwin)

iD8DBQFAgK/jAfqZj7rGN0oRAuvLAJ0dc8+B6NuTnIbUQWOV2OqCQYCfJQCeNHJm
t6lrGtXwIkmhRr+O9VPrHuQ=
=f7dh
-----END PGP SIGNATURE-----




More information about the Zope-Dev mailing list