[openstreetmap/openstreetmap-website] Add allow_read_email oauth permission (#1431)

[mmd]

I wonder if there's really need to hand out the real email address to third parties. 

We already have a mechanism for proxy email addresses when sending out messages to other mappers (i.e.. c-xxxxx-yyyy at messages.openstreetmap.org). If I'm not mistaken, the receiver of such a message can immediately replay to it and it would end up in my OSM inbox, as well as being forwarded to my email address.

Can't we hand out such a proxy email address via `allow_read_email` and use the infrastructure already in place to handle the rest?


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/1431#issuecomment-295663701
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20170420/06a0a7e1/attachment.html>