search

benadida / helios-server

Helios server
http://heliosvoting.org
Apache License 2.0
714 stars 340 forks source link

Update Privacy page, and note implications of logging in on home page #219

Open nealmcb opened 5 years ago

nealmcb commented 5 years ago

https://heliosvoting.org/privacy says, under "In General":

"We do not use external trackers or advertising that could leak information about you, except for Facebook and Twitter share buttons"

But Helios does, right from the home page, encourage people to log in via Facebook or Google. There is no explanation of why anyone would want to do that, and no clarification of what sort of information leaking or tracking might happen due to that. Especially with widespread concern these days about corporate tracking, this should be clarified in the Privacy policy, and on the home page and anywhere else logins are processed.

Later it notes "For Administrators", that:

To create and administer an election, you will need to log in using Google, Facebook, Yahoo, or Twitter.

That is related and tracking issues should be addressed for administrators as well as voters.

Finally, Yahoo and Twitter logins aren't on the home page. Are they no longer used for logins?

c-urrutia commented 5 years ago

Hello, there's a way to enable this authentication methods under settings.py you can enable this line: AUTH_ENABLED_AUTH_SYSTEMS = ['password','facebook','twitter', 'google', 'yahoo'] and dissable this other line: AUTH_ENABLED_AUTH_SYSTEMS = get_from_env('AUTH_ENABLED_AUTH_SYSTEMS', 'google').split(",")

Could you enter the system using Google authentication? I had the problems that I described here: https://github.com/benadida/helios-server/issues/222