Hey John, Ah, that makes sense. Yep, feel free to file a Feature Request explaining your entire situation and we can see what we can do about it!
On Thursday, March 3, 2016 at 4:25:59 PM UTC-5, JohnGB wrote: > > Thanks for the info Nick. > > Part of the pain with this is that I have middleware which forces secure > connections. To have an exception for this, I will have to change to > having per route middleware, which is quite frankly ugly code wise. But it > seems like that is the only option open here. I'll likely lodge an issue > on that link. > > ~ John > > On Thursday, March 3, 2016 at 8:53:43 PM UTC+1, Nick (Cloud Platform > Support) wrote: >> >> Hey John, >> >> Given that the HTTP requests for push queues exist only within our >> secured infrastructure and aren't exposed to anything but the endpoint >> which receives them, there's no need to worry about eavesdropping attacks >> which motivate the existence of SSL and HTTPS. When it comes to using the >> Task Queues REST API, this is protected by HTTPS and OAuth2.0, so again >> there should be no cause for concern. >> >> If you'd like, for any reason, to suggest a feature request on the >> platform, feel free to lodge these in the App Engine Public Issue Tracker >> <https://code.google.com/p/googleappengine/issues/list> or the Cloud >> Platform Public Issue Tracker >> <https://code.google.com/p/google-cloud-platform/issues/list>. Those >> issue trackers are triaged regularly and you should see a response >> relatively quickly. >> >> Best wishes, >> >> Nick >> Cloud Platform Community Support >> >> On Thursday, March 3, 2016 at 10:53:36 AM UTC-5, JohnGB wrote: >>> >>> It seems that the calls from the push taskqueue are made using an >>> unsecured HTTP, and not a HTTPS connection. Given that sensitive >>> information is often passed on the taskqueue, is it possible to change this? >>> >> -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to google-appengine+unsubscr...@googlegroups.com. To post to this group, send email to google-appengine@googlegroups.com. Visit this group at https://groups.google.com/group/google-appengine. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/cebca172-378c-4490-aa84-df09e7c923b3%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
