[openstreetmap-website] Disable automatic gravatar opt-in, as it violates the privacy policy (#519)

Štefan Baebler notifications at github.com
Wed Nov 6 09:30:21 UTC 2013


Scary: for users with existing gravatar profile one can easily see their profile by just providing the hash:
http://en.gravatar.com/dee41dcf0aa0c08cf6b0eb935b7504b7
or [use API to fetch json](http://en.gravatar.com/site/implement/profiles/json/) with all their data
http://en.gravatar.com/dee41dcf0aa0c08cf6b0eb935b7504b7.json
No rainbows, no dictionaries and no GPU brute forcing required.

---
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/519#issuecomment-27854728
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20131106/b1949d57/attachment.html>


More information about the rails-dev mailing list