Re: Managing the balance between SSL and impact on the server

We have a Django solution that blends both SSL and none SSL. We did it
by creating a decorator for views that adds an attribute to the view
function and then some middleware that ensures these views are always
server over SSL (with a permanent redirect to the SSL equivalent if
necessary). We also rewrote Django's {% url %} to allow us to point to
SSL pages automatically.

The solution is pretty neat and we only use SSL for the same sorts of
things that you mention.

Euan

On Jul 1, 12:59 pm, ALJ <astley.lejas...@gmail.com> wrote:
> Hi Erik,
>
> Thanks for the advice. I'll certainly have a look at the servers.
>
> I just wanted to know really whether it was an "all or none" situation
> with SSL. If it was possible blend secure and non secure connections.
>
> ALJ
>
> On Jul 1, 11:13 am, Erik Cederstrand <e...@cederstrand.dk> wrote:
>
> > Den 01/07/2010 kl. 11.02 skrev ALJ:
>
> > > I have an extranet for staff and known partners. It has absolutely no
> > > public content. I've installed SSL so it should be secure, but I also
> > > heard that SSL can have a big impact on the server.
>
> > Just measure it instead of guessing. Enable system monitoring on your server for a couple of days and run one day with SSL and the next day without.
>
> > We can't tell you if your data and your login credentials are worth protecting with SSL - you need to make that decision yourself. If your server is choking on the load of SSL processing, then either upgrade the server or decide to not use SSL if you need to save the money.
>
> > Erik
>
> >  smime.p7s
> > 2KViewDownload

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To post to this group, send email to django-users@googlegroups.com.
To unsubscribe from this group, send email to django-users+unsubscribe@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/django-users?hl=en.