On Nov 9, 2009, at 11:40 PM, Richard Fairhurst wrote: > Michal Migurski wrote: >> Why not use OAuth? (please use OAuth ;) > > Potlatch 2 will (in fact Potlatch 2 already does!), because there's > an OAuth > library for AS3. There isn't one for AS1 and developing one for > what's just > a bit of fun would be overkill - better to spend the time on > Potlatch 2 > itself.
You could perhaps hide the complexity of the OAuth bits behind the proxy script and use the three-legged option. It's a bit of extra or maybe just different work, but the problem OAuth seeks to address (stopping sites from asking you for passwords they shouldn't know) is very real here. Also I'm not in any way trying to diminish this awesome feature in a fast-moving software project, just wanted to make sure the safest option was being pursued! =) -mike. ---------------------------------------------------------------- michal migurski- m...@stamen.com 415.558.1610 _______________________________________________ talk mailing list talk@openstreetmap.org http://lists.openstreetmap.org/listinfo/talk