Wednesday, August 13, 2008

Is keyczar a possible solution to no gae ssl?

My security knowledge is very lackluster but I do know that not having ssl will hamper google appengine's uptake. Therefore, I was extremely interested to see this: keyczar. Since it has a python implementation, it seems reasonable to my security small mind that it could be used to implement security over http.

1 comment:

Steve Weis said...

Hi. I wanted to run the Python version on Google App Engine. Unfortunately, it turned out that the underlying PyCrypto library we uses C code. So, unfortunately that won't run on GAE.

We'll either need to find or write a pure Python crypto implementation, or wait until GAE supports Java.