Thorsten Scherler schrieb:
On Thu, 2008-02-21 at 23:26 +0100, Andreas Hartmann wrote:
Jörn Nettingsmeier schrieb:

[...]

:), but we should not introduce inheritance and complicated lookup
mechanisms.
there's the potentially dangerous situation when a page that should have
ssl (and was in an ssl subtree) gets moved out of it and loses ssl
protection - too many subtle pitfalls imho.
I just noticed that the SSL setting is already inherited. The docu publication just used the default pub's policies directory and therefore my change to the policy had no effect.

The questions is how we should set up the zones server for SSL. Maybe the easiest way is to use the servlet container. Is there already a certificate that we can use?

We need to ask this on the infrastructurer list, I am not aware of
this.

Should we put a detailed concept paper in the Wiki so that they can imagine what we are planning? This way they can decide whether to endorse our publishing project.

We may want to activate ssl in the apache and use it as well as proxy.
This way we have a nice testing scenario with proxy as well on the zones
server. Has the big advantages that all committer have access to it.

+1

-- Andreas



--
Andreas Hartmann, CTO
BeCompany GmbH
http://www.becompany.ch
Tel.: +41 (0) 43 818 57 01


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to