Roadmap for SSL on 3rd party domains?

28 views
Skip to first unread message

David Parks

unread,
Oct 20, 2010, 2:03:32 AM10/20/10
to google-a...@googlegroups.com
All the posts about this seem to be from 2008.

I see SSL for 3rd party domains is on the roadmap.

Anyone have any insight about approximately when this might become a reality?

I started developing an app for app-engine, but this is an obvious show stopper that I overlooked. I need to know if I should jump ship early or keep onboard.

Kenneth

unread,
Oct 20, 2010, 11:10:18 AM10/20/10
to Google App Engine
According to the issue tracker someone started working on it last
week: http://code.google.com/p/googleappengine/issues/detail?id=792

According to the App Engine For Business Roadmap it will be a limited
release by the end of this year: http://code.google.com/appengine/business/roadmap.html

What I really would like to know is how they're going to do it: sni
(could be free once you have the cert), fixed ip (will cost something)
or some other voodoo.

I don't see why this is a showstopper for you though.

David Parks

unread,
Oct 20, 2010, 12:20:42 PM10/20/10
to google-a...@googlegroups.com
Great info, this is exactly what I couldn't track down, thanks! I'll keep
apprised of changes, that might just coincide with our release, or at least
shortly thereafter and I'll be able to migrate back onto GAE soon.

I can't imagine lack of SSL not being a showstopper, to me it makes a
webhosting provider irrelevant without it. Specifically we will process
credit card transactions and need to accept and relay the financial data
(not just doing a paypal/google payments re-directs because we offer a more
complex auto re-charge option requiring us to handle the card info and
obtain a transaction id for future reference). Beyond that in general I
don't want account pages unsecured. I can't think of many websites of
significance that don't employ SSL somewhere.

And of course re-directs to myapp.appspot.com is just unprofessional,
unacceptable, and I imagine a pain in the rear with cookie/session issues
(that's would be one ugly hack).

Thanks for the quick and detailed response! It was very helpful!
Dave

--
You received this message because you are subscribed to the Google Groups
"Google App Engine" group.
To post to this group, send email to google-a...@googlegroups.com.
To unsubscribe from this group, send email to
google-appengi...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/google-appengine?hl=en.

Ikai Lan (Google)

unread,
Oct 20, 2010, 2:35:38 PM10/20/10
to google-a...@googlegroups.com
David,

We agree with you about SSL. It's a high priority item for us. It's just a bit more work for us to make this piece work.

You may want to look into using a third-party provider for payments, though. I bring this up simply because unless you are a billing provider, dealing with money, payments and subscriptions is a mess and it would be a good idea to outsource it so you can focus on your core product. Here's a startup I've heard a bit about that isn't PayPal or Google Checkout: http://chargify.com/

There are also others, and I'd like to welcome folks to post providers they use.

--
Ikai Lan 
Developer Programs Engineer, Google App Engine

David Parks

unread,
Oct 20, 2010, 3:20:27 PM10/20/10
to google-a...@googlegroups.com

We actually did the integration ourselves using paypal as a processor. With approval you can do reference transactions where paypal maintains all of the card data and provides a transaction ID with which you can make future charges without re-requesting payment information from the client (we offer an auto-recharge pre-paid plan similar to a pre-paid phone). All in all it was only a few weeks of work to hook up the paypal APIs. Hence we’re just a middle man in the process, but the user stays on our site (professional and clean appearance), and easy to do. I don’t think you can pull that off with the cart options.

 

Anyway, thanks for the response. For now we’ll probably have to host ourselves on Amazon EC2, but will look at migrating onto google again later, I love the concept you’ve put together for hosting, it’s the best out there.

 

Dave

suyash singh

unread,
Oct 20, 2010, 3:26:54 PM10/20/10
to google-a...@googlegroups.com
keeeeeeeep onboard is good

--
You received this message because you are subscribed to the Google Groups "Google App Engine" group.
To post to this group, send email to google-a...@googlegroups.com.
To unsubscribe from this group, send email to google-appengi...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.



--
~*suyash*~
 

Reply all
Reply to author
Forward
0 new messages