[Zope] - Secure Server

Robert OConnor rocon@pivot.net
Mon, 25 Jan 1999 09:14:38 -0500


How does ZOPE integrate with a
"SSL" secure server such as

Red Hat Secure Web Server 2.0
http://www.redhat.com/product.phtml/WB2000

I have some understanding of the security offered
on the server but what about security between
the browser and the server?

Can (and How) can SSL be integrated 
into the ZOPE login.

The security hole that I see is entering ID
and password at some remote site and after I
leave, someone could reuse my ID and password
for access because it's not encrypted between
the browser and zope server.

I understand that SSL servers are slowed down
but only ID/Passwords need be SSL and after
that, during the session, SSL security doesn't
have to be used.

I may not have a full understanding of this.
Please enlighten me!

-bobo connor