Opened 15 years ago
Closed 11 years ago
#2412 closed enhancement (wontfix)
Add SSL support for map download
Reported by: | Owned by: | team | |
---|---|---|---|
Priority: | minor | Milestone: | |
Component: | Core | Version: | |
Keywords: | Cc: |
Description (last modified by )
See lower dsniff output from JOSM downloading maps:
-- snip --
04/13/09 12:13:03 tcp C673c.c.ppp-pool.de.46689 -> bart203.bart.ucl.ac.uk.80 (http)
GET /api/ HTTP/1.0
Host: www.openstreetmap.org
Authorization: Basic dnQxMDA6bXZlbWpzdTZw [vt100:thisisapassword]
-- snap --
I'd very like to see the use of https or SSL here...
Attachments (0)
Change History (3)
comment:1 by , 15 years ago
comment:2 by , 15 years ago
SSL ist overhead here and only wastes cpu time, as the OSM data is public available and does'nt need to be protected. HTTP digest authentication should be use instead.
comment:3 by , 11 years ago
Description: | modified (diff) |
---|---|
Resolution: | → wontfix |
Status: | new → closed |
JOSM supports OAuth since 2010 (r2748) and 2011 for Debian.
But youre warned in JOSM.
Of course, its easy to spoof your identity and "delete the world" some secure mechanism should be created.