On 1/10/07, pragmaticObjects <[EMAIL PROTECTED]> wrote: > > I think it might be a mistake that Django does not want to serve static > file. Here's what I mean. When I switch to SSL mode (thanks to the > SSLMiddleware by Anotnio Cavedoni), since not the entire page is served > by Django (i.e. some images are from the admin media), so Firefox, for > example does not show a lock at the bottom of the page and the address > bar is not painted in light yellow. To the casual users who are trained > to look for those security indicators on the browsers but do not > understand better, they get paranoid. Because of that, how would anyone > expect Django to be used outside of the newspaper/blog/etc > applications. I hope I'm wrong, meaning I hope there's a solution that > I don't know about. If you know the solution, please share. Thanks > > There are a few thing that come to mind. They all have to do with how your server is configured and differ based on how your set up.
Say, your site is served via SSL from https://example.com (note the *s*). Then your media could be served from https://media.example.com (again note the *s*) where media.example.com is a different server (whether on a different machine or the same) that served static content via SSL. This, would probably require multiple certificates (one for each subdomain) and could get expensive. Or, perhaps your serving everything from one server. Say, Apache/mod_python. Then in your config you `SetHandler` to Python/Django (https://example.com/), but for the Location `site_media` (https://example.com/site_media/) you `SetHandler None` and static media is served directly by Apache so Django never sees the request. Assuming Apache is configured correctly and as your still behind https (again, note the *s*) you're good and only need one certificate as everything is behind one domain. If your using Fcgi a few extra tricks with mod_rewrite (or your server's equivalent) should get you the same effect as the mod_python trick. -- ---- Waylan Limberg [EMAIL PROTECTED] --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send email to django-users@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/django-users?hl=en -~----------~----~----~----~------~----~------~--~---
