Hi All, So I'm fairly new to web development in general. I'm quite familiar with the Python language, so I found mod_wsgi to be right up my alley. I've created an app that only I will be using from multiple locations. I have the app on HTTPS, without any HTTP whatsoever. I am now looking to further secure my page from prying eyes using some sort of authentication scheme. My data is not terribly sensitive, I'm just paranoid and in case I develop something more in the future, I'd like to know the right ways to do this. Basic and Digest kind of scare me, as Basic sends the username/password from the browsers credential cache with every request. To use Digest, clients and servers need to store the HA1. Which I also find to not be as secure as I'd like, if my comprehension of both schemes are accurate. It seems these both might be sufficient for a single-user page over HTTPS. But is there something more that Python can offer me that I can make use of within mod_wsgi applications?
What ways can I implement authentication through wsgi? I don't mind being criticized, if you don't mind taking the time to school me proper. -- You received this message because you are subscribed to the Google Groups "modwsgi" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/modwsgi. For more options, visit https://groups.google.com/groups/opt_out.
