On Sat, Mar 7, 2009 at 12:50 AM, Graham Dumpleton <graham.dumple...@gmail.com> wrote: > BTW, if there is anything else you would like to see in mod_wsgi, now > is the time to speak up as am close to point where can wrap up work on > mod_wsgi 3.0.
For the sites I work on, mod_wsgi is already basically perfect (to the point that I usually don't bother reading the release notes when I upgrade since I've already got everything I need). The only exception would be, yes, X-Sendfile support -- I have a number of apps that need to allow some sort of authenticated file downloads. Over time I've played with mod_xsendfile, lighttpd's mod_secdownload, Perlbal's X-Reproxy-* stuff, and nothing really beats the convenience of X-Sendfile, including mod_python's direct ``req.sendfile`` thing. Yes, the security concerns you mention are a possible concern, especially for folks on shared hosts, and I'd completely understand leaving the feature out because of those concerns -- in my book, security trumps features every day. There's enough other ways of accomplishing the same task that I don't see it as a hugely important feature, but there's no denying that it'd be convenient. Jacob [And thanks for your comments on #2131; I hadn't thought fully through all the different options there, so it's good to have the refresher.] --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send email to django-users@googlegroups.com To unsubscribe from this group, send email to django-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/django-users?hl=en -~----------~----~----~----~------~----~------~--~---