Re: [OSM-talk] OpenStreetMap enhances user privacy

2014-03-29 Thread Vincent Privat
2014-02-13 13:37 GMT+01:00 Tom Hughes t...@compton.nu: On 13/02/14 04:40, JB wrote: Remote towards JOSM doesn't work anymore in https? Have you checked this? Well there's not a lot we can do about it - it works by loading a localhost URL in a hidden frame but that is active content so

Re: [OSM-talk] OpenStreetMap enhances user privacy

2014-02-16 Thread Martin Koppenhoefer
Am 13/feb/2014 um 14:24 schrieb Pieren pier...@gmail.com: For those who think that SSL is protecting privacy: http://blog.cryptographyengineering.com/2013/12/how-does-nsa-break-ssl.html obviously it depends against who you want to protect, against the NSA it is probably not possible to

Re: [OSM-talk] OpenStreetMap enhances user privacy

2014-02-14 Thread Johannes Kröger
From: Pieren pier...@gmail.com For those who think that SSL is protecting privacy: http://blog.cryptographyengineering.com/2013/12/how-does-nsa-break-ssl.html Yes, there are attacks against SSL/TLS. That's no reason to believe that it is useless at protecting your privacy. Using HTTPS sounds

Re: [OSM-talk] OpenStreetMap enhances user privacy

2014-02-13 Thread Tom Hughes
On 13/02/14 04:40, JB wrote: Remote towards JOSM doesn't work anymore in https? Have you checked this? Well there's not a lot we can do about it - it works by loading a localhost URL in a hidden frame but that is active content so will be blocked by modern browsers if loading http from

Re: [OSM-talk] OpenStreetMap enhances user privacy

2014-02-13 Thread Alex Barth
On Tue, Feb 11, 2014 at 3:02 PM, Richard Weait rich...@weait.com wrote: http://blog.openstreetmap.org/2014/02/11/osm-enhances-user-privacy/ Fantastic. Big THANK YOU to everyone involved getting OSM on SSL! ___ talk mailing list talk@openstreetmap.org

Re: [OSM-talk] OpenStreetMap enhances user privacy

2014-02-13 Thread Pieren
For those who think that SSL is protecting privacy: http://blog.cryptographyengineering.com/2013/12/how-does-nsa-break-ssl.html Pieren ___ talk mailing list talk@openstreetmap.org https://lists.openstreetmap.org/listinfo/talk

Re: [OSM-talk] OpenStreetMap enhances user privacy

2014-02-12 Thread JB
Remote towards JOSM doesn't work anymore in https? Have you checked this? JB. Le 11/02/2014 21:02, Richard Weait a écrit : http://blog.openstreetmap.org/2014/02/11/osm-enhances-user-privacy/ ___ talk mailing list talk@openstreetmap.org

[OSM-talk] OpenStreetMap enhances user privacy

2014-02-11 Thread Richard Weait
http://blog.openstreetmap.org/2014/02/11/osm-enhances-user-privacy/ ___ talk mailing list talk@openstreetmap.org https://lists.openstreetmap.org/listinfo/talk

Re: [OSM-talk] OpenStreetMap enhances user privacy

2014-02-11 Thread Martin Koppenhoefer
2014-02-11 21:02 GMT+01:00 Richard Weait rich...@weait.com: http://blog.openstreetmap.org/2014/02/11/osm-enhances-user-privacy/ btw.: as far as I remember from earlier discussions regarding user privacy, OSMF is logging the IP addresses of users accessing the site. How long is this data

Re: [OSM-talk] OpenStreetMap enhances user privacy

2014-02-11 Thread Colin Smale
I notice that https://wiki pages contain some http: absolute URLs... Embedded slippy maps are not showing either... Where's the place to log these bugs (assuming it is not 'by design')? Colin On 2014-02-11 21:02, Richard Weait wrote:

Re: [OSM-talk] OpenStreetMap enhances user privacy

2014-02-11 Thread Grant Slater
On 11 February 2014 20:32, Colin Smale colin.sm...@xs4all.nl wrote: I notice that https://wiki pages contain some http: absolute URLs... Embedded slippy maps are not showing either... Where's the place to log these bugs (assuming it is not 'by design')? If it is something simple easiest to

Re: [OSM-talk] OpenStreetMap enhances user privacy

2014-02-11 Thread Peter Barth
Hi, Richard Weait schrieb: http://blog.openstreetmap.org/2014/02/11/osm-enhances-user-privacy/ great news, thank you very much! Btw, will forum.openstreetmap.org switch in future, too? And another question: Could you consider to favor cacert certificates over RapidSSL/GeoTrust? Thanks, Peda

Re: [OSM-talk] OpenStreetMap enhances user privacy

2014-02-11 Thread Tom Hughes
On 11/02/14 21:04, Peter Barth wrote: And another question: Could you consider to favor cacert certificates over RapidSSL/GeoTrust? Why would we want to do that? It would cause virtually all our users to get certificate warnings when visiting the site. Tom -- Tom Hughes (t...@compton.nu)

Re: [OSM-talk] OpenStreetMap enhances user privacy

2014-02-11 Thread Peter Barth
Hi, Tom Hughes schrieb: On 11/02/14 21:04, Peter Barth wrote: And another question: Could you consider to favor cacert certificates over RapidSSL/GeoTrust? Why would we want to do that? :) Imho the CA system is totaly broken. If you want any security you need pinning. Anyways, I'd

Re: [OSM-talk] OpenStreetMap enhances user privacy

2014-02-11 Thread Tom Hughes
On 11/02/14 21:56, Peter Barth wrote: However, you might have a point with this one :/ I forgot about the other operating systems out there and I suppose MS doesn't include cacert's root certificate :( Other operating systems doesn't really come into it - as far as I know there is no major

Re: [OSM-talk] OpenStreetMap enhances user privacy

2014-02-11 Thread Peter Barth
Tom Hughes schrieb: Other operating systems doesn't really come into it - as far as I know there is no major browser that includes the cacert root certificate. At least chrom{e,ium} and konqueror use the system certificates. This works for me, but you're right, I had to import for firefox.

Re: [OSM-talk] OpenStreetMap enhances user privacy

2014-02-11 Thread Tom Hughes
On 11/02/14 22:41, Peter Barth wrote: Tom Hughes schrieb: Other operating systems doesn't really come into it - as far as I know there is no major browser that includes the cacert root certificate. At least chrom{e,ium} and konqueror use the system certificates. This works for me, but you're