Re: [josm-dev] shocking - unsecure password sending!

2009-10-07 Thread Lars Francke
> - signing and checking a signature is essentally encrypting and > decrypting (CPU?), but with less data Indeed. But as far as I know HMAC-SHA1 is reasonably quick and shouldn't be a performance hit. Even more so because it needs to be done only once for each 'consumer' (JOSM in this case). > -

Re: [josm-dev] shocking - unsecure password sending!

2009-10-07 Thread Lars Francke
>> If HTTPS is ever offered we have two options (as we do now): > > A third option with a non-standard auth token being generated was discussed > in this thread, and that's probably what Stefan was referring to. I must have overlooked that. In that case I'm sorry Stefan, seems as if _I_ was the on

Re: [josm-dev] shocking - unsecure password sending!

2009-10-07 Thread Lars Francke
> No, I meant the tokens which would be used if authentication is done with > https and > data transmission without. Somehow these two parts have to be connected, a > token transfered > with the authentication would be one solution. > > This token could be intercepted and used to send unauthenticat

Re: [josm-dev] shocking - unsecure password sending!

2009-10-07 Thread Lars Francke
> It could result in an upload session takeover. > It depends on the implementation if these tokens are valid for things other > than map data upload. If you are taking about OAuth tokens I can only reiterate that these tokens alone are not helpful at all. One has to know the token secret, too. An

Re: [josm-dev] Commit message not empty

2009-04-22 Thread Lars Francke
> But honestly, what would you say from a user interface perspective; > should we try and keep changesets open? What JOSM currently does is open > changeset - upload - close, for each upoad action. Some people have a > habit of uploading once every five minutes and they are perhaps annoyed > to hav

Re: [josm-dev] Is it possible to show ids for elements?

2009-01-12 Thread Lars Francke
> Adding "osm-primitives.showid = true" to your prefs will do what you > want. Thank you very much! I was pretty sure that I'm not the first one to think of this feature :) Lars ___ josm-dev mailing list josm-dev@openstreetmap.org http://lists.openstre

[josm-dev] Is it possible to show ids for elements?

2009-01-11 Thread Lars Francke
Hi, I've been looking for a way to show the id for ways and nodes. When a node has no name its id is shown in the selection-window. For a way only the number of nodes is shown. So my question is if there is an option to show the id of any of the elements regardless of its tags. Thanks so much for

Re: [josm-dev] plugins - JOSM portable

2009-01-07 Thread Lars Francke
Hi, I'm using this command line to force JOSM to use my c\OSM\JOSM\data directory instead of the one in Documents and Settings: java -Djosm.home=c:\OSM\JOSM\data -jar josm-latest.jar And so far it seems to work perfectly. Lars ___ josm-dev mailing lis