Diluting effort ... if you had any idea with the GAE team looked like, perhaps you could share with us, since as far as I know, as far as anyone knows, it's just a black hole. For all we know they could have the resources, and be scheduled to, deliver 22 languages tomorrow, including full Python support. Or maybe the staff consists of just the few Googlers we see answering questions, but somehow that seems ridiculous.
> Actually, they were pretty forward about these issues at Google I/O.
> The team structure, size, resources and priorities were discussed.
> Unless their approach has changed since, they are effectively slowing
> solving other issues (like SSL) on order to add support for more
> languages.
Incidentally, the biggest problem with SSL is that it does not scale
well, at least in the incarnation that comes with a lot of common web
browsers. The hard thing for the GAE team is not just getting around
to things, but doing them right such that they will scale. As various
folk have noticed, one difficulty is hardening/sandboxing languages,
but almost a completely orthogonal difficulty is providing
language-independent features that will scale well, such as the email
API.
Dave.
Can we agree that google will do with it's time what it thinks is best?
That's because the star
system seems to be flooded by people who are not using GAE, and making
requests simply to have a free host, and some of us feel that more
important issues get stalled.
He's the Stephen Colbert of programming... except he's not kidding!
Google *has* announced that they're planning to offer other languages,
stars or no starts. That doesn't necessarily mean they're giving the
language issues 4000 times more attention than the other issues just
because they're starred so much. Porting a language is difficult and
I expect it will take a long time, especially since you also have to
create a runtime environment, a dev emulator, and some kind of minimal
framework. Most of these other issues are short and quick in
comparision. And any other language will have the same kind of
toddler period and bugs that Python is having on GAE; it won't just
hit the ground running.
Regarding SSL, obviously without it e-commerce will never migrate to
App Engine. And e-commerce providers have the biggest wallets. So
presumably SSL will be offered at the same time paid services are, or
shortly thereafter. Unless Google doesn't care that much whether App
Engine succeeds. Since Google is not the sort of company to charge
$30,000 for its lowest-level services, I expect there will be a
low-cost SSL option for basic/hobbyist apps, and higher-cost options
for storefront apps. They may even offer "business packages" with SSL
bundled with other services.
--
Mike Orr <slugg...@gmail.com>
> SSL is an easily solved problem. SSL accelerators are cheap, easy to manage
> add-on, plug-in pieces of hardware. But yeah, why offer it for free if
> you're planning to offer a paid service?
It's not as easy as you might think, and it's not because of the
computational overhead of doing the encryption, etc. It's because the
current widespread SSL version (SSL 3, a.k.a. TLS 1) requires the
hostname in the certificate to match one particular IP address, so
multiple applications per IP address or applications across multiple
IPs don't work all that well. TLS 1.1 solves that, but it's still not
as widespread as it will need to be.
Dave.