Does this mean that GAE SSL support is practically useless for now? Because one should either stick to subdomain.appspot.com or use no SSL.
On Jul 28, 6:23 pm, mdipierro <mdipie...@cs.depaul.edu> wrote: > This is a security hazard > > On Jul 28, 10:15 am, Vidul Petrov <vidul.r...@gmail.com> wrote: > > > > > Is there a way the Auth methods to run over GAE SLL (https://my- > > domain.appspot.com) and return to the hosted domain the same session? > > > If, for example, users are logged in onhttps://my-domain.appspot.com > > they are still not logged onhttp://www.my-domain.com. > > Does web2py support such cross-domain sessions?