On Mon, 2006-07-10 at 21:52 -0400, Jonathan wrote:
> a- is this correct:
> the recommended place to run ssl through is some sort of proxy?


Yes.

> b- in that scenario, is there any way to make sure that a login
> happened via SSL ?


There are many ways you could do it. You can proxy traffic from SSL to
a differently-named virtual host on the mod_perl server, or a different
port, or add a header of some kind to the proxied request. There's a
lot of discussion on this topic in the mailing list archives.

- Perrin