Closed GoogleCodeExporter closed 9 years ago
According to
http://code.google.com/intl/en/appengine/docs/java/config/webxml.html#Secure_URL
s
Note: Google Apps domains do not currently support HTTPS. HTTPS support is
limited to
apps accessed via *.appspot.com domains. Accessing an HTTPS URL on a Google
Apps
domain will return a "host not found" error, and accessing a URL whose handler
only
accepts HTTPS (see below) using HTTP will return an HTTP 403 "Forbidden" error.
You
can link to an HTTPS URL with the *.appspot.com domain for secure features, and
use
the Apps domain and HTTP for the rest of the site.
Original comment by kinyelo@gmail.com
on 8 Mar 2010 at 6:38
OK, that could be a problem for sites using own domain names. I only tested
HTTPS on
an appspot.com domain.
Original comment by mithan...@gmail.com
on 8 Mar 2010 at 11:12
Please just STOP creating custom user management solutions! Please spend your
time on
really nesessary topics.
All GAE apps should use built-in secure user management.
Original comment by a.kosenkov
on 22 May 2010 at 8:50
> Please spend your time on really nesessary topics.
In my humble opinion, a volunteer open source project should be a safe place
where
people can "scratch an itch". If someone has an "itch" for utilizing the
built-in
secure user management, the project is open to patches and other contributions.
* http://www.vosao.org/developer#volunteering
> All GAE apps should use built-in secure user management.
Personally, I think its a good idea for GAE apps to offer alternatives. We use
Google
Accounts to login into Google Sites work, and it is far from an ideal
experience.
Moreover, a valid use of GAE is to bridge with pre-existing applications, which
may
already have an authentication system.
-Ted.
Original comment by ted.husted
on 23 May 2010 at 2:13
Original comment by kinyelo@gmail.com
on 26 Jul 2010 at 4:35
Original issue reported on code.google.com by
mithan...@gmail.com
on 8 Mar 2010 at 10:44