On 26.07.2020 22:30, Jim Henderson wrote:
> Given the international nature of the community, GDPR may also be a
> consideration.  That's one of the big challenges these days with data
> protection laws.

Ah, I have to deal with this every day in my day job. It isn't all that 
bad unless you want to milk the users for their data. There is exactly 
one thing missing for the user registration on povray.org and that is a 
way for the user to delete the account created. The reason is that the 
personal email address is considered private data and it is required to 
register because an email gets sent to it.

The other bigger issue of the website is, and I am sure Chris will 
address it once time allows, that it doesn't use HTTPS for the user data 
changes. Of course, nothing is gained by encryption given emails are 
public anyway, but still these days with browser vendors aggressively 
pushing encryption for marketing reasons, povray.org has little chance 
to escape this trend on the www site.

Thorsten

Post a reply to this message