[openstreetmap/openstreetmap-website] Add allow_read_email oauth permission (#1431)

[Simon Poole]

As @tomhughes has said we really need to get the policy side of this decided before legal and technical (both of these are doable).

On the policy side I would want to note, as this has got a bit lost in the discussion, that providing an API to our messaging system is a clear alternative to handing out e-mail addresses (we could limit apps that have access to that, just as we would likely have to do with e-mail access).

And one nice aspect of doing that is that it creates a level playing field between those app/service operators that know what a burden keeping personal information safe is and would rather not have to store the addresses themselves, and those that don't know that yet. I suspect that I don't need to quote all the recent and past issues even quite large organisations have had.


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/1431#issuecomment-286483375
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20170314/ab47ab23/attachment-0001.html>