[Zope] SSL + ProxyPass + Zope question...

Joachim Werner joe@iuveno-net.de
Sat, 4 Aug 2001 14:17:18 +0200


> Can you just firewall off port 8080?

That's what I would do. It's way more secure than doing anything in Zope.
Zope SiteRules can be switched off via the web ...

BTW: How likely is it that your users go to the :8080 port? The whole thing
might just be a question of user training ... - You could also use
cookie-based authentication with SSL (like Cookie Crumbler). In combination
with a SiteRoot set to "https://..." this should always display the login
form via SSL.

Joachim