title: appengine http secure?
body: <p>A simple question, I think.</p>
  
  <p>If I use the google users accounts in appengine</p>
  
  <pre><code>from google.appengine.api import users
  </code></pre>
  
  <p>to authenticate my users, how secure is the rest of my app under http (not https), ie. where are the weak points of such a setup?</p>
  
  <p>Thanks </p>