[Zope] Zope and HTTPS

Toby Dickenson tdickenson@geminidataloggers.com
Tue, 13 Aug 2002 14:38:03 +0100


On Tuesday 13 Aug 2002 2:28 pm, Ben Avery wrote:
> Hi,
>
> the site I'm developing will need to run over HTTPS, behind a load
> balancer, maybe with ZEO, and will need to also serve XML-RPC over HTTP=
S.
>
> Is the best thing to do here to run it behind Apache with mod_ssl

If you care about security then you really need to run zope behind a fron=
t-end=20
proxy. either Apache/mod_ssl or Squid are good.

>, or
> use the ZServerSSL in M2Crypto?

That good if you need something lightweight, and squid/apache are too hea=
vy.=20
For most people this a bad compromise IMO.