Opened 17 years ago

Closed 12 years ago

#2412 closed enhancement (wontfix)

Add SSL support for map download — at Version 3

Reported by: vt100@… Owned by: team
Priority: minor Milestone:
Component: Core Version:
Keywords: Cc:

Description (last modified by Don-vip)

See lower dsniff output from JOSM downloading maps:

-- snip --
04/13/09 12:13:03 tcp C673c.c.ppp-pool.de.46689 -> bart203.bart.ucl.ac.uk.80 (http)
GET /api/ HTTP/1.0
Host: www.openstreetmap.org
Authorization: Basic dnQxMDA6bXZlbWpzdTZw [vt100:thisisapassword]
-- snap --

I'd very like to see the use of https or SSL here...

Change History (3)

comment:1 by fatbozz, 17 years ago

But youre warned in JOSM.
Of course, its easy to spoof your identity and "delete the world" some secure mechanism should be created.

comment:2 by Fabi2, 16 years ago

SSL ist overhead here and only wastes cpu time, as the OSM data is public available and does'nt need to be protected. HTTP digest authentication should be use instead.

comment:3 by Don-vip, 12 years ago

Description: modified (diff)
Resolution: wontfix
Status: newclosed

JOSM supports OAuth since 2010 (r2748) and 2011 for Debian.

Note: See TracTickets for help on using tickets.