Hello, I am pleased to announce the release of ZServerSSL 0.04. In normal operation, ZServerSSL protects user names, passwords and data in transit against eavesdropping. Given valid user certificates and mappings from certificates to Zope users, Zope no longer requires passwords for access. This improves site security by removing the need to store passwords on the Zope site. ZServerSSL is bundled with the latest snapshot of M2Crypto, and is also available as a separate package.
Feedback is very much appreciated.