Opened 2 years ago
Last modified 8 months ago
#6171 reopened enhancement
prefer OAUTH in favour of "normal Login" and redesign warnings (WAS: use ssl with OAUTH)
| Reported by: | skyper | Owned by: | team |
|---|---|---|---|
| Priority: | major | Component: | Core |
| Version: | tested | Keywords: | oauth prefer warning |
| Cc: |
Description (last modified by skyper)
Under communication Preferences using OAUTH it says that the passwd is still once transmitted as plain text.
Either this message is wrong or OAUTH should use ssl as the server provides it now.
Thanks a lot
skyper
Attachments (0)
Change History (8)
comment:1 Changed 23 months ago by skyper
comment:2 Changed 23 months ago by stoecker
- Resolution set to fixed
- Status changed from new to closed
"Secure" is the "S" in SSL.
comment:3 Changed 22 months ago by skyper
- Resolution fixed deleted
- Status changed from closed to reopened
Why does JOSM warn about a secure connection ?
Think the bottom box should rather say "Note" or "Info" but not "Warning: using secure connection".
At least in German it is that way.
comment:4 follow-up: ↓ 5 Changed 22 months ago by stoecker
If I remember right it does not warn about a secure connection, but about the fact, that JOSM connects to webspace emulating a user access.
comment:5 in reply to: ↑ 4 Changed 22 months ago by skyper
Replying to stoecker:
If I remember right it does not warn about a secure connection, but about the fact, that JOSM connects to webspace emulating a user access.
You are right, but I think it is misleading if you warn about one secured login and on the other hand only have the same word "warning" on the "normal" login methode which should be disabled or at least been moved to the right that oauth is the default behaviour.
Also a link to oauth on your first upload would be nice and the warning about unsecure connection should be highlighted in this window, too.
Thanks
comment:6 Changed 22 months ago by skyper
- Keywords prefere warning added; ssl removed
- Priority changed from normal to major
- Summary changed from use ssl with OAUTH to prefere OAUTH in favour of "normal Login" and redisign warnings (WAS: use ssl with OAUTH)
comment:7 Changed 22 months ago by skyper
- Summary changed from prefere OAUTH in favour of "normal Login" and redisign warnings (WAS: use ssl with OAUTH) to prefere OAUTH in favour of "normal Login" and redesign warnings (WAS: use ssl with OAUTH)
comment:8 Changed 8 months ago by skyper
- Description modified (diff)
- Keywords prefer added; prefere removed
- Summary changed from prefere OAUTH in favour of "normal Login" and redesign warnings (WAS: use ssl with OAUTH) to prefer OAUTH in favour of "normal Login" and redesign warnings (WAS: use ssl with OAUTH)



At least in German the warning below the pw line states that oauth uses a safe connection. What is meant with safe ?