On 03/02/16 21:51, markus schnalke wrote:

Adding https is also a bit tricky at the moment I think, but should be
possible if/when we switch to letsencrypt.

That would be great and important, because HTTP Basic Authentication
should not be done unencrypted. In developing an editor, one would want
to ensure that the API is always called via HTTPS, if HTTP Basic Auth is
to be used. Testing such an editor is thus not possible with the testing
API.

If you're developing a new editor you should be using OAuth not HTTP basic auth.

Tom

--
Tom Hughes ([email protected])
http://compton.nu/

_______________________________________________
dev mailing list
[email protected]
https://lists.openstreetmap.org/listinfo/dev

Reply via email to