Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
HTTPS support for staticmap.openstreetmap.de #25
The OSM Wiki currently uses this service to display static maps on its pages. The Wiki itself uses HTTPS but this subpage offers HTTP only. This causes mixed content warnings. Could you please consider adding this.
If this is the wrong place to post this, please forward it to some other repository.
grmpf I not even wanted to re-enable staticmap at all.
There is a German saying:
We might enable https at some stage at the new FOSSGIS Server, but as I need a wildcard certificate to do this I have to check DNS delegation with FOSSGIS administration. I actually already did this but did not consider this a top priority and still do not.
This is newly mentioned here, not because of "mixed content warnings" (a minor irritation) but because of the newly introduced usage restriction of requiring referrer headers. The two things combined mean that https sites can no longer use the static maps service at all.
The message we get:
...suggests web developers or even end users did something wrong.
I was confused about this because browser behaviour is somewhat erratic as far as I can see, but mostly browsers won't send the referrer header to the image host if it's on a https website. I guess it's browser caching making it erratic. Try swapping between these two in different browsers:
So basically it doesn't really make sense to require referrers while not serving over https. But better than nothing I suppose. Thanks for doing something to avoid yanking the service completely.
If there is something which does not help progress at all, then its postings asking for progress. Quite the opposite it takes my time answering questions like these.
I need a Wildcard certificate for *.openstreetmap.de and I currently do not have a nameserver to handle this. While it would be easy enough to set up bind for this purpose, I think this should be done by FOSSGIS admin not me and this is why there is no progress currently.
Frankly I do not care about staticmap that much as I think this should be hosted by osm.org anyway (if at all) not me.
This said, the first thing I'm looking at enabling SSL for is the other projects running on http://everest.openstreetmap.de