tag:help.tenderapp.com,2008-11-12:/discussions/problems/276-exposing-email-addresses-a-privacy-concernTender: Discussion 2014-03-25T20:31:03Ztag:help.tenderapp.com,2008-11-12:Comment/554272009-02-02T16:39:27Z2009-02-02T16:39:27ZExposing email addresses a privacy concern<div><p>people don't like having their email address displayed for all
to see (see attached for just one example)</p>
<p>this is a really big problem using SSO - people have chosen not
to reveal their email address anywhere else on our site. I presume
the same is true of other sites using tender.</p>
<p>Thoughts?</p></div>Xavier Shaytag:help.tenderapp.com,2008-11-12:Comment/554272009-02-03T02:08:07Z2009-02-03T02:08:10ZExposing email addresses a privacy concern<div><p>This is a make or break issue for me as well. Also, could I have
a link to your TOS about the email addresses you get in our use of
the system? We take our user's privacy extremely seriously and want
to be able to know that their data (email addresses) is protected
when in your hands.</p></div>Bill Zellertag:help.tenderapp.com,2008-11-12:Comment/554272009-02-03T02:09:33Z2009-02-03T02:09:33ZExposing email addresses a privacy concern<div><p>OK, we'll address this ASAP.</p></div>Courtenaytag:help.tenderapp.com,2008-11-12:Comment/554272009-02-03T16:42:36Z2009-02-03T16:42:36ZExposing email addresses a privacy concern<div><p>We need <em>something</em> to be displayed, otherwise people
that don't specify a name will just have a blank.</p></div>ricktag:help.tenderapp.com,2008-11-12:Comment/554272009-02-03T16:45:05Z2009-02-03T16:45:05ZExposing email addresses a privacy concern<div><p>Display email address to support staff only, "Anonymous" to
other punters if no name specified.</p>
<p>Also!</p>
<p>In many cases, a "Display Name" could be provided via SSO.</p></div>Xavier Shaytag:help.tenderapp.com,2008-11-12:Comment/554272009-02-03T16:54:19Z2009-02-03T16:54:19ZExposing email addresses a privacy concern<div><p>Okay, I'll change it to just the first part of the email
address. "rick (anonymous)". We already show the actual email
address to the supporters. And I'll add support for tender_name. We
also have some other supporter-only options coming for external_id
and external_url. This way you'll be able to provide a direct link
to an internal user admin if you wanted.</p></div>ricktag:help.tenderapp.com,2008-11-12:Comment/554272009-02-03T16:55:11Z2009-02-03T16:55:11ZExposing email addresses a privacy concern<div><p>ace, that sounds good</p></div>Xavier Shaytag:help.tenderapp.com,2008-11-12:Comment/554272009-02-03T17:29:47Z2009-02-03T17:29:50ZExposing email addresses a privacy concern<div><p>This works for me, as long as tender_name is authenticated (by
added it to the hmac).</p></div>Bill Zellertag:help.tenderapp.com,2008-11-12:Comment/554272009-02-04T09:09:04Z2009-02-04T09:09:04ZExposing email addresses a privacy concern<div><p>tender_name isn't used yet, but will be. So go ahead and start
using it. I've tweaked this so that the email domain isn't shown
anymore.</p></div>ricktag:help.tenderapp.com,2008-11-12:Comment/554272009-02-06T09:42:48Z2009-02-06T09:42:48ZExposing email addresses a privacy concern<div><p>We just deployed tender_name and it's part of the hmac. When you
sign your URL, please sign the string "host/email/expires/name".
The old way will still work.</p></div>Courtenaytag:help.tenderapp.com,2008-11-12:Comment/554272009-02-06T09:57:30Z2009-02-06T09:57:30ZExposing email addresses a privacy concern<div><p>Make sure you're using the latest tender_multipass if you want
to set the name. For now the code is in my fork.</p>
<p>http://github.com/courtenay/tender_multipass/tree/master</p></div>Courtenay