Hi all.  I think a better solution is for devlopment.ini to listen
only on localhost by default.  I've opened a ticket for it:
http://pylonshq.com/project/pylonshq/ticket/483

Mats brings up an important point, that if your development
workstation is accessible from the Internet, unintended users can
access your unfinished application.  For most developers, being
limited to localhost is entirely sufficient.  If developers do need to
share their unfinished app with colleagues on an internet or the
Internet can change their development.ini.  But even then, there
should be a warning about putting it behind basic authentication and
SSL.

-- 
Mike Orr <[EMAIL PROTECTED]>

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"pylons-discuss" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/pylons-discuss?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to