On Sat, Mar 7, 2009 at 12:50 AM, Graham Dumpleton
<graham.dumple...@gmail.com> wrote:
> BTW, if there is anything else you would like to see in mod_wsgi, now
> is the time to speak up as am close to point where can wrap up work on
> mod_wsgi 3.0.

For the sites I work on, mod_wsgi is already basically perfect (to the
point that I usually don't bother reading the release notes when I
upgrade since I've already got everything I need).

The only exception would be, yes, X-Sendfile support -- I have a
number of apps that need to allow some sort of authenticated file
downloads. Over time I've played with mod_xsendfile, lighttpd's
mod_secdownload, Perlbal's X-Reproxy-* stuff, and nothing really beats
the convenience of X-Sendfile, including mod_python's direct
``req.sendfile`` thing.

Yes, the security concerns you mention are a possible concern,
especially for folks on shared hosts, and I'd completely understand
leaving the feature out because of those concerns -- in my book,
security trumps features every day. There's enough other ways of
accomplishing the same task that I don't see it as a hugely important
feature, but there's no denying that it'd be convenient.

Jacob

[And thanks for your comments on #2131; I hadn't thought fully through
all the different options there, so it's good to have the refresher.]

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-users@googlegroups.com
To unsubscribe from this group, send email to 
django-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to