[Zope] secure password transmission

Dieter Maurer dieter@handshake.de
Thu, 16 Jan 2003 22:04:06 +0100


Raphael Arlitt wrote at 2003-1-16 10:18 +0000:
 > I am a bit doubtful about the insecure password transmission in zope. How
 > can I secure this action for user logins and for FTP access to the sites.
 > 
 > I know I can limit the site access to a domain, but still I consider that
 > as being to dangerous.
 > 
 > Any ideas or hints to documentation of securing the password transfer
 > process?
A quite secure way is to use SSL for your complete transactions
or use SSL at least for login and cookie base authentication
otherwise.

HowTos for Zope+SSL on Zope.org.


Dieter