Opened 4 years ago
Last modified 4 years ago
#2412 new enhancement
Add SSL support for map download
| Reported by: | vt100@… | Owned by: | team |
|---|---|---|---|
| Priority: | minor | Component: | Core |
| Version: | Keywords: | ||
| Cc: |
Description
See lower dsniff output from JOSM downloading maps:
-- snip --
04/13/09 12:13:03 tcp C673c.c.ppp-pool.de.46689 -> bart203.bart.ucl.ac.uk.80 (http)
GET /api/ HTTP/1.0
Host: www.openstreetmap.org
Authorization: Basic dnQxMDA6bXZlbWpzdTZw [vt100:thisisapassword]
-- snap --
I'd very like to see the use of https or SSL here...
Attachments (0)
Change History (2)
comment:1 Changed 4 years ago by fatbozz
comment:2 Changed 4 years ago by Fabi2
SSL ist overhead here and only wastes cpu time, as the OSM data is public available and does'nt need to be protected. HTTP digest authentication should be use instead.



But youre warned in JOSM.
Of course, its easy to spoof your identity and "delete the world" some secure mechanism should be created.