@zverik Continued support of OAuth1a was a heavy burden on the osm.org code maintainers. The code was poorly understood and had issues with continued upstream library support. OAuth1 (not 1a) is known insecure. osm.org codebase has been rapidly improving in 2024, some tough choices needed to be made.
@osm_tech Sure, I understand that and support your decisions. That tweet wasn't an attack, just a heads-up :) Migration is going relatively fine rn, maybe by mid-June the new Level0 will be up.