All the communication is done on the local network, so security isn't a huge 
issue, however, I still require the JSON-RPC service to communicate over 
HTTPS so that when I pass username/password combinations to it, it's all 
encrypted. And I use a custom controller that checks authentication. 
Although, now that Massimo has enabled web2py to be used as a CAS provider 
by default, this may be the best way to go.

Reply via email to