How do I get around this? Will I have to use Apache in front of Zope? (Please, say no...)

Okay, "No" -- but the correct answer is "yes" :^) A while back there was a thread about incorporating crypto into Zope. Unfortunately, that would be a substantial time committment that would pay relatively few dividends. Moroever, the whole international/ITAR situation wrt crypto makes it very unattractive for a US company. Apache for https:// and ZServer for http://... sounds okay to me. --Rob