how to use <keygen> in tornado?

[aliane abdelouahab]

HTML5 supports <keygen> to make a secret key, how this is useful with
tornado?

[Ben Darnell]

The keygen tag is not actually new in html5 - it was originally a netscape-only tag that has been added to the spec because html5 is about documenting what browsers actually do.  Browsers are not required to implement keygen in a useful way; IE doesn't support it and doesn't intend to, so it's probably not that useful (for background see http://blog.whatwg.org/this-week-in-html5-episode-35).  If you can live with limited browser support the most complete technical documentation appears to be here: http://lists.whatwg.org/pipermail/whatwg-whatwg.org/attachments/20080714/07ea5534/attachment.txt

-Ben

On Sun, Apr 7, 2013 at 6:28 PM, aliane abdelouahab <alabde...@gmail.com> wrote:

HTML5 supports <keygen> to make a secret key, how this is useful with
tornado?

--
You received this message because you are subscribed to the Google Groups "Tornado Web Server" group.
To unsubscribe from this group and stop receiving emails from it, send an email to python-tornad...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

[aliane abdelouahab]

the problem of IE is that it blocks users web dev from moving! now
with Android and iOS i think that IE will be negligible ?
so from what i see i must activate SSL ? then if i do, does Tornado
understand the key? (i assume that the application will warn users if
IE is found)

On 8 avr, 01:28, Ben Darnell <b...@bendarnell.com> wrote:
> The keygen tag is not actually new in html5 - it was originally a
> netscape-only tag that has been added to the spec because html5 is about
> documenting what browsers actually do.  Browsers are not required to
> implement keygen in a useful way; IE doesn't support it and doesn't intend

> to, so it's probably not that useful (for background seehttp://blog.whatwg.org/this-week-in-html5-episode-35).  If you can live

> with limited browser support the most complete technical documentation

> appears to be here:http://lists.whatwg.org/pipermail/whatwg-whatwg.org/attachments/20080...

>
> -Ben
>
> On Sun, Apr 7, 2013 at 6:28 PM, aliane abdelouahab

> <alabdeloua...@gmail.com>wrote:

[Russ Weeks]

Aliane,

If you want a secure link between Tornado and the browser, use SSL.  That's all there is to it.  It will work in all browsers, even IE!  Ignore the keygen element.

Look at the documentation for ssl_options here:

http://www.tornadoweb.org/en/branch2.4/httpserver.html?highlight=ssl_options

You will probably want to start by creating a self-signed certificate and key file; Google to find instructions for your platform.

-Russ

[aliane abdelouahab]

thank you
i was searching about <keygen> element because i've done a small e-
commerce application, and because in the report i talked about
security, and html5, so i guess i should ignore the <keygen> element?

On 8 avr, 19:23, Russ Weeks <rwe...@newbrightidea.com> wrote:
> Aliane,
>
> If you want a secure link between Tornado and the browser, use SSL.  That's
> all there is to it.  It will work in all browsers, even IE!  Ignore the
> keygen element.
>

> Look at the documentation for ssl_options here:http://www.tornadoweb.org/en/branch2.4/httpserver.html?highlight=ssl_...

>
> You will probably want to start by creating a self-signed certificate and
> key file; Google to find instructions for your platform.
>
> -Russ
>

> On Mon, Apr 8, 2013 at 11:07 AM, aliane abdelouahab <alabdeloua...@gmail.com

[aliane abdelouahab]

found it
it seems that <keygen> works with Netscape Certificate Server
http://pki.fedoraproject.org/wiki/PKI_History
http://support.microsoft.com/kb/190282