HTTPS support is really great.

Here is a summary of remaining security issues with App Engine.

* Support HTTPS for arbitrary domains (not just *.appspot.com)
This request is being tracked in issue 792:
http://code.google.com/p/googleappengine/issues/detail?id=792

* urlfetch doesn't verify HTTPS certificates
See issue 46 http://code.google.com/p/googleappengine/issues/detail?id=46,
which is now (for some reason beyond my understanding) a duplicate
of issue 61: http://code.google.com/p/googleappengine/issues/detail?id=61

* Mail API should support TLS
See issue 497: http://code.google.com/p/googleappengine/issues/detail?id=497

* Uploading the app to App Engine servers over HTTPS
See issue 794: http://code.google.com/p/googleappengine/issues/detail?id=794

* Secure access to the Admin Console (appengine.google.com)
See issue 795: http://code.google.com/p/googleappengine/issues/detail?id=795

Feel free to add to this list.

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to google-appengine@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to