0

I am working on a practice project for which I am trying to build a secure login system. Getting my own SSL certificate or a solution that needs a dedicated server is not an option. I was thinking about hosting the site on my domain but doing the authentication on my App Engine site. Is there any way of doing this securely without sending them over to the subdomain.example.com domain?

User
  • 1,363
  • 2
  • 13
  • 23

2 Answers2

1

App Engine doesn't currently support SSL on your own domain (and when it does, you'll still need to buy an SSL certificate, though that's not difficult). For a good review of why it's not really possible to secure sessions without SSL, see this recent question. If security is important to you, you'll need to serve the signed-in part of your site off yourapp.appspot.com for now.

Community
  • 1
  • 1
Nick Johnson
  • 100,655
  • 16
  • 128
  • 198
0

Perhaps I've not understood your question, but have you considered OpenID?

Fabrizio Accatino
  • 2,284
  • 20
  • 24