I think that this is a great project and I’m happy that people have created it!
However… to be clear, I believe that you’re trustworthy and am not suspecting you of anything. But I feel really uncomfortable about the thought of it becoming common practice that people independently make new mirrors of LW where you log in using the same credentials. I assume that you’re not capturing our passwords, but will that be the case for every new mirror that someone might make?
Yes, I have the same concern. In the future I’d like to set up OAuth to avoid any need to trust me with your credentials at all, but for now I decided not to let the perfect be the enemy of the good. I certainly understand anyone who prefers to avoid logging in until then.
I think that this is a great project and I’m happy that people have created it!
However… to be clear, I believe that you’re trustworthy and am not suspecting you of anything. But I feel really uncomfortable about the thought of it becoming common practice that people independently make new mirrors of LW where you log in using the same credentials. I assume that you’re not capturing our passwords, but will that be the case for every new mirror that someone might make?
Yes, I have the same concern. In the future I’d like to set up OAuth to avoid any need to trust me with your credentials at all, but for now I decided not to let the perfect be the enemy of the good. I certainly understand anyone who prefers to avoid logging in until then.
Yeah, I’ve been looking into OAuth, and so this should be possible at some point in the next few months. Until then you should certainly be careful.