from http://code.google.com/appengine/docs/configuringanapp.html#Secure_URLs
Shell:~/dev/AppEngine/google_appengine/n23 >: head -n 45 app.yaml
application: n23
version: 1
runtime: python
api_version: 1
handlers:
- url: /blog
script: blog.py
secure: always
- url: /blog/.*
script: blog.py
secure: always
- url: /themes/.+
script: cache.py
secure: always
- url: /static/.+
script: cache.py
secure: always
...