Uses online routing?

[ghost]

Hi, your app is really neat but I have some questions. Does it use an online service to create routes? If so does this mean that starting points and destinations are uploaded to internet servers? Is this process encrypted? What is the privacy policy for these locations.

The reason I ask is because if I create a route from the US State of Maine to upper New York State when I have an internet connection it says route failed and prompts me to download Quebec and Ontario maps. If I am in airplane mode it routes through New Hampshire and Vermont. How would it know going through Canada may be a faster route without downloading those regions?

I was under the impression that MAPS.ME works offline, without sending personal information to third parties. Is this impression incorrect?

[biodranik]

We use our own server to anonymously return list of downloadable maps when you are routing between different maps/regions. As far as I remember it is done over HTTP connection.

The privacy policy is the same as for whole application http://legal.my.com/us/maps/privacy/ http://legal.my.com/us/maps/privacy/

[ghost]

Are endpoints uploaded? Or just map regions?

[biodranik]

As far as I remember, start and end points are present in the request

[ghost]

I appreciate your openness. Please allow me to offer some creative feedback.

1. I can see the benefit of this behavior for the user. It is in their best interest to know when they are missing map data.
2. HTTP is very bad for potentially sensitive information such as depature and arrival points. It is good not every search is sent across the internet though.
3. I suggest that you implement HTTPS connection as soon as possible to protect your users, at least for sensitive information. (Unencrypted .mwm files are less of a concern)
4. Optionally give users a choice to disable server communication if they wish, limited only to map downloads.

These are my suggestions, thank you for considering them. It is important to note that we live in an age of mass surveillance, intercepting this data is exactly what governments and individuals do. “effectively means that anyone using Google maps on a smartphone is working in support of a GCHQ system.” MAPS.ME is much better than Google was in 2008 since not every query is sent, this small hole can be fixed to make everyone more secure.

[biodranik]

Thanks, I suppose (3) should be easy for us. (4) you can easily get by turning on flight mode.

@gardster can you please create a task for https?

On 21.12.2015, at 06.22, wkfobixp notifications@github.com wrote:

I appreciate your openness. Please allow me to offer some creative feedback.

I can see the benefit of this behavior for the user. It is in their best interest to know when they are missing map data.

HTTP is very bad for potentially sensitive information such as depature and arrival points. It is good not every search is sent across the internet though.

I suggest that you implement HTTPS connection as soon as possible to protect your users, at least for sensitive information. (Unencrypted .mwm files are less of a concern)

Optionally give users a choice to disable server communication if they wish, limited only to map downloads.

These are my suggestions, thank you for considering them. It is important to note that we live in an age of mass surveillance, intercepting this data is exactly what governments and individuals do. “effectively means that anyone using Google maps on a smartphone is working in support of a GCHQ system.” MAPS.ME is much better than Google was in 2008 since not every query is sent, this small hole can be fixed to make everyone safer.

—
Reply to this email directly or view it on GitHub.

[gardster]

https://trello.com/c/k0eGKsgB/2209-https-https-github-com-mapsme-omim-issues-1073

[gardster]

Ok. We add a https support for missed maps requests.

[biodranik]

Thanks, @gardster !
It should be available in upcoming releases.

[ghost]

Thank you for working quickly to fix this issue!

[rugk]

Another question: When the route only goes through maps, which ate already downloaded, ate the route endpoints still send to the server?
If so, can you change this been behavior?

[biodranik]

CC @burivuh

On 1.10.2016, at 01.51, rugk notifications@github.com wrote:

Another question: When the route only goes through maps, which ate already downloaded, ate the route endpoints still send to the server?
If so, can you change this been behavior?

—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub, or mute the thread.

[burivuh]

If we are talking about online routing - yes. At this point when
application tries to create a multi-map route it can't be sure that it
knows all the routing details available. So it tries to call a server
whenever possible.

On 1 October 2016 at 11:51, rugk notifications@github.com wrote:

Another question: When the route only goes through maps, which ate already
downloaded, ate the route endpoints still send to the server?
If so, can you change this been behavior?

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
#1073 (comment), or mute
the thread
https://github.com/notifications/unsubscribe-auth/ACGjARVQ66WZ9C1jRBqH3uh4Vnd8d8hyks5qvh8BgaJpZM4G47lX
.

[rugk]

That's bad. Can't you change this behavior? I mean it works in flight mode too, so this request can't be such essential.

[mpimenov]

There may be several separate paths between points in different mwms and even if your downloaded maps are enough to figure out one of the paths it doesn't mean that it will be optimal. What you see in airplane mode is apparently a best-effort result.

[rugk]

But you should be able to avoid it when all maps 100km near the end and start point are downloaded... 😒