Re: Python 3 and SSH Tunnel

From	Dennis Lee Bieber <wlfraed@ix.netcom.com>
Subject	Re: Python 3 and SSH Tunnel
Date	2013-08-10 16:16 -0400
Organization	IISS Elusive Unicorn
References	<092fdbf5-1db3-4ea5-82ee-4b02cec80dc6@googlegroups.com> <fb11865f-5972-4277-a67c-8bfd83cbade9@googlegroups.com>
Newsgroups	comp.lang.python
Message-ID	<mailman.437.1376165800.1251.python-list@python.org> (permalink)

Show all headers | View raw

On Sat, 10 Aug 2013 03:39:49 -0700 (PDT), "D. Xenakis"
<gouzounakis@hotmail.com> declaimed the following:

>What about the security though? 
>
>To be specific, i need to create an application (python 3.3 strictly) where users will save/load their settings online to a remote hosted database. I do not wish to change the database from listening to any other thing than localhost for security reasons, so i assume the best solution for me would be to make the program create some ssh tunnels before the saving/loading happens.
>
>But would this policy make my database (or the rest of the databases that im running on that machine) unsecure? Is there any workaround this?
>
>How would you do that online saving/loading?

	You run a "server" on the database machine which accepts the save/load
connections from the remote users -- it then accesses the (now) local
database for the settings information.

	How you secure the "server" becomes part of your protocol... HTTPS with
a login/password scheme? (I'm presuming the users won't be seeing a web
page, so cookies might be a non-starter for the session; instead you'd need
the user login/password for all traffic). Your "server" then becomes
responsible for handling all validation, and the database is still just
localhost to the server.
-- 
	Wulfraed                 Dennis Lee Bieber         AF6VN
    wlfraed@ix.netcom.com    HTTP://wlfraed.home.netcom.com/

Back to comp.lang.python | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Python 3 and SSH Tunnel "D. Xenakis" <gouzounakis@hotmail.com> - 2013-08-08 12:30 -0700
  Re: Python 3 and SSH Tunnel Skip Montanaro <skip@pobox.com> - 2013-08-08 15:03 -0500
  Re: Python 3 and SSH Tunnel Chris Angelico <rosuav@gmail.com> - 2013-08-08 23:54 +0100
    Re: Python 3 and SSH Tunnel "D. Xenakis" <gouzounakis@hotmail.com> - 2013-08-08 17:46 -0700
      Re: Python 3 and SSH Tunnel Chris Angelico <rosuav@gmail.com> - 2013-08-09 01:56 +0100
      Re: Python 3 and SSH Tunnel Bernd Waterkamp <Bernd-Waterkamp@web.de> - 2013-08-09 18:40 +0200
    Re: Python 3 and SSH Tunnel "D. Xenakis" <gouzounakis@hotmail.com> - 2013-08-08 17:50 -0700
      Re: Python 3 and SSH Tunnel Chris Angelico <rosuav@gmail.com> - 2013-08-09 01:57 +0100
  Re: Python 3 and SSH Tunnel "D. Xenakis" <gouzounakis@hotmail.com> - 2013-08-10 03:39 -0700
    Re: Python 3 and SSH Tunnel Veritatem Ignotam <veritatem.ignotam@gmail.com> - 2013-08-10 14:29 -0400
    Re: Python 3 and SSH Tunnel Dennis Lee Bieber <wlfraed@ix.netcom.com> - 2013-08-10 16:16 -0400

csiph-web