I did not notice and that is bad.

If your app uses authentication you should have

     session.secure()

and use HTTPS. The latter line will not accept sessions cookies
without HTTPS.

Massimo

On Sep 29, 4:28 pm, "mr.freeze" <[email protected]> wrote:
> What are sites like reddit.com doing to secure their logins?
> Anything?  The login request goes over http according to firebug.  I'm
> just wondering if my wiki site needs https for login or http is
> acceptable or if there is another trick I can use.
>
> Thanks!
> Nathan
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/web2py?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to