Thanks for the detail explanation! I think I am going to use ssh tunnel to
localhost now.


On Wed, May 22, 2013 at 6:32 PM, Massimo Di Pierro <
massimo.dipie...@gmail.com> wrote:

> There are good reasons to be so secure. Without ssl, anybody on any of the
> networks you are on can monitor your traffic and steal your password or
> your session cookies. It is very easy to do. There are programs called
> wireshark and tcpdump to do it. If the have your admin password they can
> run programs on your machine. You can get in serious legal trouble. Do not
> hack access.py. Make an ssh tunnel to loalhost using Putty. You do not need
> a ssl certificate to make a tunnel.
>
> Massimo
>
>
> On Wednesday, 22 May 2013 18:35:47 UTC-5, Wei Li wrote:
>>
>> It's really annoying. For developing stage, there is no reason to be so
>> secure.....
>>
>> The easiest way: modifying models/access.py seems doesn't work for me.
>>
>> My web2py is redirectly to apache. Using SSL will involve lot of
>> configs....
>>
>> Have to keep hacking web2py's source code now.
>>
>  --
>
> ---
> You received this message because you are subscribed to a topic in the
> Google Groups "web2py-users" group.
> To unsubscribe from this topic, visit
> https://groups.google.com/d/topic/web2py/VolRfv-1XH8/unsubscribe?hl=en.
> To unsubscribe from this group and all its topics, send an email to
> web2py+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/groups/opt_out.
>
>
>

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to web2py+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to