Josef Meile schrieb:
After having started the thread about securing CookieCrumbler, I figured
out that it was better to secure Basic Authentication instead. So, I just
Which is actually identically :-) Its just a different HTTP-Header
created a new Product, called JMSSLBasicAuth, which is based on the
CookieCrumbler Transversal Hook. Instead of Cookie Authentication, I will
redirect insecure Basic Authentication requests to ssl.
You remember to stay in ssl once you switched?
I have tested it and it seems to work. I'm planning to use it in production
websites, so, I would really appreciate if you could give me some
constructive feedback about the product (See reference ), ie: what can I
improve, change, or add?
I'd think you could add the redirection support (which can indeed be usefull
and simplify configuration) in a way not disabling cookie-auth the same time.
(For example you cannot really log out with Basic Auth)
Zope maillist - Zope@zope.org
** No cross posts or HTML encoding! **
(Related lists -