As Nick said. If you want secure don't use the image service use the Blobstore and authenticate. Image service works like a CDN with no authentication so that assets can be served very quickly. This is the trade off, Faster serving, no ability to restrict by user.
From: google-appengine@googlegroups.com [mailto:google-appengine@googlegroups.com] On Behalf Of Bruno Sandivilli Sent: Wednesday, October 05, 2011 11:28 AM To: google-appengine@googlegroups.com Subject: Re: [google-appengine] ImageService API Privacy But if my application is critical? I dont wanna tell enybody, that he's images are in a secure place, but some one hava a 1 / 2^256 chances to get access. So, if i saved my image in the blobstore, and want to serve this images within the ImageService, how can i acomplish this, securely? Thanks 2011/10/4 Nick Johnson <nickjohn...@google.com> Hi Bruno, The only part of the Images API that provides an external URL is get_serving_url. If you want to control access to image blobs, don't use that functionality, and serve images yourself (using the blobstore serving support) after performing authentication checks. -Nick Johnson On Wed, Oct 5, 2011 at 7:13 AM, Bruno Sandivilli <bruno.sandivi...@gmail.com> wrote: Why, how can i save sensitive data(images) using the ImageService API, since it provides an world wide visible url ? -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com <mailto:google-appengine%2bunsubscr...@googlegroups.com> . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- Nick Johnson, Developer Programs Engineer, App Engine -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com <mailto:google-appengine%2bunsubscr...@googlegroups.com> . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
