On Tue, 10 Jan 2006 09:18:59 -0800, Stephen Davis <[EMAIL PROTECTED]> wrote:
>> The reason I want static pages is for security concerns. It is not
>> easy whether buildbot can be trusted to have no security flaws,
>> which might allow people to start new processes on the master,
>> or (perhaps worse) on any of the slaves.
>
>I have security concerns as well, but not in buildbot itself.  My
>project is restricted even withinz the company I work for so I need
>the buildbot web server to only be available to certain people.
>HTTPS access would be nice too.  TwistedWeb doesn't seem to have
>support for either HTTPS or authentication so I've been forced to
>"hide" it by putting it on a non-standard port.  Very weak.

Inexcusably weak.  Fortunately not exactly accurate, though: Twisted's web 
server supports both HTTPS and authentication.  I won't bore the list with the 
details, but you can read more here: 
<http://twistedmatrix.com/documents/current/api/twisted.internet.interfaces.IReactorSSL.html>
 and 
<http://twistedmatrix.com/projects/web/documentation/examples/simpleguardex2.py>

Jean-Paul
_______________________________________________
Python-Dev mailing list
Python-Dev@python.org
http://mail.python.org/mailman/listinfo/python-dev
Unsubscribe: 
http://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com

Reply via email to