Re: [web2py] Re: Web2py and SSLH

2012-03-01 Thread Michele Comitini
I should read the docs... I know... but the quick question is why all connection appear from localhost? With proper ip header rewriting rules that should not happen. mic Il 01 marzo 2012 04:49, drelyn86 ha scritto: > It just forwards the connection like a reverse proxy, so no MITM is caused. > W

[web2py] Re: Web2py and SSLH

2012-02-29 Thread drelyn86
It just forwards the connection like a reverse proxy, so no MITM is caused. Why would I need to completely disable session cookies? Anyway... I was thinking about this more, and I remembered that the current scaffolding app's method of preventing security breaches through generic views is by dis

[web2py] Re: Web2py and SSLH

2012-02-27 Thread Ross Peoples
I would be interested to see if SSH can actually be forwarded without triggering a main-in-the-middle error. I'm not sure on the first question, but I would guess that you would want to disable everything except your app. At the bottom of the db.py model, just put "session.forget(request)". Thi