[openstreetmap/openstreetmap-website] gravatar / user image should only be available to authenticated users (#1631)

Tom Hughes notifications at github.com
Tue Jul 28 12:47:03 UTC 2020


If I have a user have indicated that I want you to use gravatar then I want you to use it and I don't see why it matters when the person it is shown to is logged in or not.

What next? Do we refuse to reveal the username of a user to anybody that isn't logged in? that can equally be used to match me across services if I use the same username.

Why do you think a user signing up will expect that there picture will be semi-private but not other information?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/1631#issuecomment-665018377
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20200728/7eebd48d/attachment.htm>


More information about the rails-dev mailing list