[openstreetmap-website] EFF Privacy Badger complains about openstreetmap.org cookies (being used by "3rd parties") (#1032)

[danstowell]

OK, right. The main thing that is happening here is NOT that PB is acting suspicious about long URLs. Instead, it detects when resources get used across multiple sites. Gravatar is a classic case, since of course it's been designed to be used across multiple sites. So for you @neiljp what it means is that PB has detected that there is more than one website that YOU visit, that invokes the same Gravatar URLs.

In theory Gravatar could be doing evil tracking of users, simply based on the fact that it knows who is requesting its URLs. So the way to solve the PB warnings for Gravatar is to get Gravatar to follow EFF's policies. That's not an issue for OSM.

If I go to the "User diaries" page I see lots of PB warnings. However none of them are about resources loaded from OSM servers. I don't know if there's any reason for us to be concerned about those "foreign" resources re tracking.

---
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/1032#issuecomment-130567169
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20150813/845657df/attachment.html>