it' possible to replace the form fields and query parameter pymailcgi currently generates with client-side cookies marked as secure such cookies are automatically encrypted when sent unfortunately againmarking cookie as secure simply means that it can be transmitted only if the communications channel with the host is secure it does not provide any additional encryption because of thisthis option really just begs the questionit still requires an https server the secret py module as you can probably tellweb security is larger topic than we have time to address here because of thatthe secret py module in example - finesses the issueby trying variety of approaches in turnif you are able to fetch and install the third-party pycrypto system described earlierthe module will use that package' aes tools to manually encrypt password data when transmitted together with username if notit will try rotor nextif you're able to find and install the original rotor module in the version of python that you're using and finallyit falls back on very simplistic default character code shuffling obfuscation schemewhich you can replace with one of your own if you install this program on the internet at large see example - for more detailsit uses function definitions nested in if statements to generate the selected encryption scheme' functions at run time example - pp \internet\web\pymailcgi\cgi-bin\secret py ""##############################################################################pymailcgi encodes the pop password whenever it is sent to/from client over the net with usernameas hidden text fields or explicit url paramsuses encode/decode functions in this module to encrypt the pswd--upload your own version of this module to use different encryption mechanism or keypymail doesn' save the password on the serverand doesn' echo pswd as typedbut this isn' safe--this module file itself might be vulnerablehttps may be better and simpler but python web server classes don' support##############################################################################""import systime dayofweek time localtime(time time())[ forcereadablepassword false for custom schemes ##############################################################################string encoding schemes ############################################################################## the pymailcgi server