unfortunately this is still a google problem. i'd love for them to solve it (and my clients would be willing to pay for the service....)
cfh On Jul 28, 8:27 am, Vidul Petrov <vidul.r...@gmail.com> wrote: > Does this mean that GAE SSL support is practically useless for now? > Because one should either stick to subdomain.appspot.com or use no > SSL. > > On Jul 28, 6:23 pm, mdipierro <mdipie...@cs.depaul.edu> wrote: > > > This is a security hazard > > > On Jul 28, 10:15 am, Vidul Petrov <vidul.r...@gmail.com> wrote: > > > > Is there a way the Auth methods to run over GAE SLL (https://my- > > > domain.appspot.com) and return to the hosted domain the same session? > > > > If, for example, users are logged in onhttps://my-domain.appspot.com > > > they are still not logged onhttp://www.my-domain.com. > > > Does web2py support such cross-domain sessions?
