On Aug 20, 2014, at 3:53 AM, Matthias Enders <m.end...@german-seed-alliance.de> 
wrote:

> Hi,
>  
> I have a question regarding the user authentication of Galaxy.
>  
> As to my knowledge galaxy uses http, also for the authentication, so the User 
> Email and the password are send in clear text.
>  
> As I like to use Galaxy for user-authentication and due several disadvantages 
> not an external authentification like described here 
> (https://wiki.galaxyproject.org/Admin/Config/ExternalUserDatbases):
> Is there any way of using https or an encryption-method for sending user 
> email and password.

Hi Matthias,

You can still serve Galaxy over HTTPS by placing it behind a proxy, even if you 
do not intend to perform authentication in the proxy. You'll just need to set 
X-URL-SCHEME in the proxy, as documented:

For nginx: https://wiki.galaxyproject.org/Admin/Config/nginxProxy
For Apache: https://wiki.galaxyproject.org/Admin/Config/ApacheProxy

--nate

>  
> With kind regards,
> Matthias Enders
>  
> ___________________________________________________________
> Please keep all replies on the list by using "reply all"
> in your mail client.  To manage your subscriptions to this
> and other Galaxy lists, please use the interface at:
>  http://lists.bx.psu.edu/
> 
> To search Galaxy mailing lists use the unified search at:
>  http://galaxyproject.org/search/mailinglists/

___________________________________________________________
Please keep all replies on the list by using "reply all"
in your mail client.  To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
  http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/

Reply via email to