On Tue, Sep 30, 2008 at 5:35 PM, David Poblador Garcia
<[EMAIL PROTECTED]> wrote:

> I'm trying to use an external HTTP service with the Fetch API from the
> AppEngine. I'm wondering if there is any way to know which IP
> address(es) Google is using for the fetch infrastructure. I'd like to
> know that in order to block non-trustable IP addresses in the remote
> HTTP RPC.

I don't think there will ever be any IP address guarantees that Google
will give you for that.

Using trusted IPs for cross-Internet traffic went out of vogue in the
80s, and is woefully insecure. You'd probably find it (a) more secure
and (b) more reliable to just send a secret token along with the
fetch.


Dave.

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to