[OSM-talk] iD Security

2015-04-21 Thread pmailkeey .
Hi All, I've been using iD for a bit now to make map edits. I've been reporting back issues with iD to Bryan including a recent discovery that when you log out of iD, as it doesn't clear local cookies someone else can log in as you in your absence. Bryan isn't interested in remedying this issue

Re: [OSM-talk] iD Security

2015-04-21 Thread Serge Wroclawski
Mike, Have you filed a bug report on their issue tracker? https://github.com/openstreetmap/iD/issues I quick search didn't reveal anything. https://github.com/openstreetmap/iD/issues?utf8=%E2%9C%93q=cookie - Serge On Tue, Apr 21, 2015 at 10:39 AM, pmailkeey . pmailk...@googlemail.com wrote:

Re: [OSM-talk] iD Security

2015-04-21 Thread Serge Wroclawski
Seeing the ticket, I think that the behavior here is what I'd expect it to be, and what I think many people would expect as well. It doesn't seem like this is related to iD ignoring cookies, but about how you were logged into an account and authorized iD to edit on behalf of one of them. I'm not

Re: [OSM-talk] iD Security

2015-04-21 Thread Tom MacWright
Please link to the ticket: https://github.com/openstreetmap/iD/issues/2588 On Tue, Apr 21, 2015 at 10:39 AM, pmailkeey . pmailk...@googlemail.com wrote: Hi All, I've been using iD for a bit now to make map edits. I've been reporting back issues with iD to Bryan including a recent discovery

Re: [OSM-talk] iD Security

2015-04-21 Thread pmailkeey .
On 21 April 2015 at 15:58, Serge Wroclawski emac...@gmail.com wrote: Seeing the ticket, I think that the behavior here is what I'd expect it to be, and what I think many people would expect as well. It doesn't seem like this is related to iD ignoring cookies, but about how you were logged

Re: [OSM-talk] iD Security

2015-04-21 Thread phil
On Tue Apr 21 16:10:09 2015 GMT+0100, pmailkeey . wrote: On 21 April 2015 at 15:58, Serge Wroclawski emac...@gmail.com wrote: Seeing the ticket, I think that the behavior here is what I'd expect it to be, and what I think many people would expect as well. It doesn't seem like this is