Re: Is Python suitable for a huge, enterprise size app?

Dave Brueck <dave@xxxxxxxxxxxxxxxxxxx> writes:
> One thing from your experience that did resonate with me is that,
> except for ftplib and occasionally urllib (for basic, one-shot GETs),
> we don't use any of the standard library's "protocol" modules - partly
> because we had to implement our own HTTP libraries for performance and
> scalability reasons anyway, and partly because we had trouble figuring
> out e.g. all the ins and outs of urllib/urllib2/httplib.

What do you use for HTTPS? And did you use the Cookie module in your
HTTP servers? You may have had problems without even being aware of
them (until recently if you used Cookie with its default settings, any
attacker could completely take over your server by sending you
carefully concoted cookies). I'm not trying to be contentious here,
just mentioning a couple further cases of where problems aren't
visible from far away but are there when you look close.
.

Relevant Pages

  • Re: Getting properties of file on web server without downloading it
    ... yes it's a HTTP server. ... I was issuing a HttpWebRequest for the file, ... Dim loginCookie as New Cookie ...
    (microsoft.public.inetsdk.programming.webbrowser_ctl)
  • Re: access HTTP request parameters?
    ... The applet lives in the same codebase as the web application, ... The "Cookie" header used for authentication is of course also set in the HTTP request used to load applet.jar to the client. ...
    (comp.lang.java.programmer)
  • Getting Response from HTTPS POST
    ... If I log in using FireFox, the session id is ... will see the attempt to get the cookie still in this code). ... uri = URI.parse ... start_with_homepage(homepage, http, headers) ...
    (comp.lang.ruby)
  • Re: POST with basic auth and cookie from python?
    ... > cookie, and then does an http POST using the cookie for authentication, ... > what would be the best python API to write to? ... I'm also struggling with http ... this all in a CGI - so any auth handlers I create aren't persistent ...
    (comp.lang.python)
  • Re: how to set/get cookie for a raw iocp http server?
    ... wrap it out in its cookie header. ... >> I am using iocp to create a http server. ... You get a cookie when the client includes Cookie: ...
    (microsoft.public.vc.atl)