Hello, I am pleased to announce the release of ZServerSSL 0.04. ZServerSSL provides a HTTPS server for Zope. In normal operation, ZServerSSL protects user names, passwords and data in transit against eavesdropping. This release of ZServerSSL presents a significant enhancement: X.509 certificate-based authentication for Zope. In this mode, Zope is run in "remote user" mode, and ZServerSSL's HTTPS server is configured to *require* user certificates. When a user connects, ZServerSSL handles certificate verification, maps the user certificate's "subject distinguished name" to a Zope username and sets REMOTE_USER accordingly. Zope's REMOTE_USER machinery takes care of the rest. Given valid user certificates and mappings from certificates to Zope users, Zope no longer requires passwords for access. This improves site security by removing the need to store passwords on the Zope site. This mode of operation can be adapted to other HTTPS servers like Apache+SSL, Roxen+SSL, etc. that perform certificate-based authentication. ZServerSSL is bundled with the latest snapshot of M2Crypto, and is also available as a separate package. It can be downloaded from here: http://www.post1.com/home/ngps/m2 Usual disclaimers apply. Feedback is very much appreciated. Cheers. -- Ng Pheng Siong <ngps@post1.com> * http://www.post1.com/home/ngps (BTW, what's this about no cross-posting btw zope-dev and zope?)