I recently found a link[1] which demonstrates how to secure a xml-rpc
service with basic HTTP-auth. But this get's send in clear-text over
the net. There's also the HTTP-Digest auth mechanism which is
apparently supported as well by twisted[2].

How do I secure an xml-rpc service using digest-auth then?
If this works, all my troubles are suddenly gon and I am sold for
twisted ;)

[1]: http://aspn.activestate.com/ASPN/Cookbook/Python/Recipe/5266 25
[2]: http://twistedmatrix.com/trac/ticket/1475