David Benjamin

You're supposed to use data instead of get_data now. Unfortunately, scripts is still on 0.8.3 apparently, so I can't actually switch that yet.

Support build configuration without DES

2

Or just drop DES altogether given how fast Athena's moving off. Would allow us to drop CryptoJS (#31).

Prereq-ish for #52, but we should avoid re-creating SJCL AES objects anyway.

http://msdn.microsoft.com/en-us/library/ie/dn302338(v=vs.85).aspx This is starting to be implemented.

There were concerns expressed. Maybe make it scarier if the domain is not on mit.edu? I don't want to block non-mit.edu things (namely Zulip), but making it a bit scarier...

Ticket renewal

1

Not sure how to deal with this, if at all. Ticket lifetimes are about a day, renewable for a week. owl-screen regularly renews them, but we can't do that here....

Better dependency management

1

I hear Twitter has a thing? Maybe we could look into it or something similar.

https://code.google.com/p/oauth2-postmessage-profile/ This would have been handy to know about earlier. Why does Google think of everything? :-)

Much fun as the "food colors only" thing was, the contrast on the dialogs is really pretty bad. They don't show up very well my thesis...

We're all AJAX-y and the browser's heuristics for login forms don't work here. Investigate how all their password managers work and see if we can fake it (navigate invisible iframes?...