[openstreetmap-website] Disable automatic gravatar opt-in, as it violates the privacy policy (#519)

[Frederik Ramm]

We're not concerned about hiding MD5 hashes in transit, nor about the centralised gravatar database. The issue is that the gravatar link containing the md5 hash is generated on the OSM server and sent to the browser as part of the user page. Even if that was https-only, it wouldn't keep someone from downloading 100.000 user pages and extracting the MD5 hashes. "libravatar" would only solve this issue if they supported salted hashes which they don't seem to do.

---
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/519#issuecomment-27822255
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20131105/9e03ab1e/attachment.html>