[google-appengine] ImageService API Privacy
Why, how can i save sensitive data(images) using the ImageService API, since it provides an world wide visible url ? -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] ImageService API Privacy
i would be interested too On Oct 4, 2011, at 4:13 PM, Bruno Sandivilli wrote: > Why, how can i save sensitive data(images) using the ImageService API, since > it provides an world wide visible url ? > > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine" group. > To post to this group, send email to google-appengine@googlegroups.com. > To unsubscribe from this group, send email to > google-appengine+unsubscr...@googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] ImageService API Privacy
Hi Bruno, The only part of the Images API that provides an external URL is get_serving_url. If you want to control access to image blobs, don't use that functionality, and serve images yourself (using the blobstore serving support) after performing authentication checks. -Nick Johnson On Wed, Oct 5, 2011 at 7:13 AM, Bruno Sandivilli wrote: > Why, how can i save sensitive data(images) using the ImageService API, > since it provides an world wide visible url ? > > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine" group. > To post to this group, send email to google-appengine@googlegroups.com. > To unsubscribe from this group, send email to > google-appengine+unsubscr...@googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/google-appengine?hl=en. > -- Nick Johnson, Developer Programs Engineer, App Engine -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] ImageService API Privacy
But if my application is critical? I dont wanna tell enybody, that he's images are in a secure place, but some one hava a 1 / 2^256 chances to get access. So, if i saved my image in the blobstore, and want to serve this images within the ImageService, how can i acomplish this, securely? Thanks 2011/10/4 Nick Johnson > Hi Bruno, > > The only part of the Images API that provides an external URL is > get_serving_url. If you want to control access to image blobs, don't use > that functionality, and serve images yourself (using the blobstore serving > support) after performing authentication checks. > > -Nick Johnson > > On Wed, Oct 5, 2011 at 7:13 AM, Bruno Sandivilli < > bruno.sandivi...@gmail.com> wrote: > >> Why, how can i save sensitive data(images) using the ImageService API, >> since it provides an world wide visible url ? >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Google App Engine" group. >> To post to this group, send email to google-appengine@googlegroups.com. >> To unsubscribe from this group, send email to >> google-appengine+unsubscr...@googlegroups.com. >> For more options, visit this group at >> http://groups.google.com/group/google-appengine?hl=en. >> > > > > -- > Nick Johnson, Developer Programs Engineer, App Engine > > > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine" group. > To post to this group, send email to google-appengine@googlegroups.com. > To unsubscribe from this group, send email to > google-appengine+unsubscr...@googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/google-appengine?hl=en. > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
RE: [google-appengine] ImageService API Privacy
As Nick said. If you want secure don't use the image service use the Blobstore and authenticate. Image service works like a CDN with no authentication so that assets can be served very quickly. This is the trade off, Faster serving, no ability to restrict by user. From: google-appengine@googlegroups.com [mailto:google-appengine@googlegroups.com] On Behalf Of Bruno Sandivilli Sent: Wednesday, October 05, 2011 11:28 AM To: google-appengine@googlegroups.com Subject: Re: [google-appengine] ImageService API Privacy But if my application is critical? I dont wanna tell enybody, that he's images are in a secure place, but some one hava a 1 / 2^256 chances to get access. So, if i saved my image in the blobstore, and want to serve this images within the ImageService, how can i acomplish this, securely? Thanks 2011/10/4 Nick Johnson Hi Bruno, The only part of the Images API that provides an external URL is get_serving_url. If you want to control access to image blobs, don't use that functionality, and serve images yourself (using the blobstore serving support) after performing authentication checks. -Nick Johnson On Wed, Oct 5, 2011 at 7:13 AM, Bruno Sandivilli wrote: Why, how can i save sensitive data(images) using the ImageService API, since it provides an world wide visible url ? -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com <mailto:google-appengine%2bunsubscr...@googlegroups.com> . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- Nick Johnson, Developer Programs Engineer, App Engine -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com <mailto:google-appengine%2bunsubscr...@googlegroups.com> . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
