[Zope3-dev] Certification: Twisted versus Zope / native HTTPS or Apache

2005-12-14 Thread Christian Theune
Hi, giving recommendations about security, we advice everyone to put their communication on protected lines. E.g. use HTTPS. As we are targetting Zope 3.3, I think twisted can be the recommended configuration option for Zope to run with. How do you feel about the use of the HTTPS server of

Re: [Zope3-dev] Certification: Twisted versus Zope / native HTTPS or Apache

2005-12-14 Thread Martijn Faassen
Christian Theune wrote: giving recommendations about security, we advice everyone to put their communication on protected lines. E.g. use HTTPS. As we are targetting Zope 3.3, I think twisted can be the recommended configuration option for Zope to run with. Agreed. How do you feel about the

Re: [Zope3-dev] Certification: Twisted versus Zope / native HTTPS or Apache

2005-12-14 Thread Rob Page
On Dec 14, 2005, at 6:28 AM, Martijn Faassen wrote: Christian Theune wrote: How do you feel about the use of the HTTPS server of twisted instead of requiring the user to channel it through an external HTTPS server, e.g. apache? [...] So, I think Apache has its place in front of

Re: [Zope3-dev] Certification: Twisted versus Zope / native HTTPS or Apache

2005-12-14 Thread Christian Theune
Hi, Am Mittwoch, den 14.12.2005, 06:39 -0500 schrieb Rob Page: On Dec 14, 2005, at 6:28 AM, Martijn Faassen wrote: So, I think Apache has its place in front of Twisted, just like Apache now has its place in front of ZServer. +1. IIUC, the C2 certification is configuration-dependent

Re: [Zope3-dev] Certification: Twisted versus Zope / native HTTPS or Apache

2005-12-14 Thread Christian Theune
Hi, Am Mittwoch, den 14.12.2005, 13:03 +0100 schrieb Christian Theune: Ok. So in favor of the mainstream (and trusted!) configuration, I'll go for using the standard Twisted/HTTP server in combination with a local Apache that provides SSL to the web browser. Actually that also means that I