Re: HMAC_KEY

Irmen de Jong <[email protected]> Wed, 13 Nov 2013 23:25:37 +0100
Newsgroups gmane.comp.python.pyro
Message-ID <[email protected]>
On 13-11-2013 22:56, F.C wrote:
> Ok, thanks
> 
> Is it a real (HMAC_KEY)  security by encrypted sending file ?
> 
> What kind of security is using ?

It is a message digest (sha-1 hmac). It is only used to detect if the messages have been
altered, or to ensure that they're coming from a trusted source. Pyro doesn't do any
encryption. So unless you tunnel over ssl or ssh or vpn, all communication is in cleartext.

See http://pythonhosted.org/Pyro4/security.html


Irmen


------------------------------------------------------------------------------
DreamFactory - Open Source REST & JSON Services for HTML5 & Native Apps
OAuth, Users, Roles, SQL, NoSQL, BLOB Storage and External API Access
Free app hosting. Or install the open source package on any LAMP server.
Sign up and see examples for AngularJS, jQuery, Sencha Touch and Native!
http://pubads.g.doubleclick.net/gampad/clk?id=63469471&iu=/4140/ostg.clktrk