[web2py] Re: Admin security: https vs localhost

[pbreit]

If I'm not mistaken, without the localhost requirement, a fraudster can go to 
/admin and run a pretty simple dictionary attack since they only need to guess 
the password.