Lukas,

I have a few fixes for the plugin, which have addressed all the  
issues for myself, and the issues everyone else has talked about on  
the list.

You don't have to specify allow_ssl: true when require_ssl: true is  
set, and you can specify the ssl_domain and non_ssl_domain in the  
security.yml.

Do you think I should just commit these fixes or submit a patch?

- Jon

On Jul 3, 2007, at 3:44 PM, Lukas Kahwe Smith wrote:

>
> Jonathan H. Wage wrote:
>> Marli,
>>
>> Maybe we should just make the plugin return true for allowSsl() if
>> require_ssl is set to true. It is kind of assumed that if you want to
>> require_ssl, that you should allow it.
>
> sure ..
>
> one not on allow_ssl default to false though:
> you generally do not want people to use ssl where you dont explicitly
> enable it. it slows down your webserver .. less caching, encryption  
> work
> etc.
>
> regards,
> Lukas
>
> >


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"symfony developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/symfony-devs?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to