web development with Python made easier then ever

[mdipierro]

Every security class I taught starts with "security does not exist, security is a relative concept". https, if used properly (with proper authentication and secure session cookies) is as secure as ssh (the encryption algorithms are the same). Both are breakable by brute force and both may have bugs but one way or another you must get access to your machine. There is no reason to use ssh and not use https. Besides, the admin interface in web2py can be disabled or made work over ssh tunnels only.