Re: [Zope] Zope and HTTPS

On Tuesday 13 Aug 2002 2:28 pm, Ben Avery wrote:

Hi,

the site I'm developing will need to run over HTTPS, behind a load balancer, maybe with ZEO, and will need to also serve XML-RPC over HTTPS.

Is the best thing to do here to run it behind Apache with mod_ssl

If you care about security then you really need to run zope behind a front-end proxy. either Apache/mod_ssl or Squid are good.

, or use the ZServerSSL in M2Crypto?

That good if you need something lightweight, and squid/apache are too heavy. For most people this a bad compromise IMO.