<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content=text/html;charset=ISO-8859-1>
<META content="MSHTML 6.00.2900.3020" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY text=#000000 bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Allen,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>hmm this is great feedback as UK cell phone numbers
don't "presently" get recycled, so I have been blindsided by my
location!</FONT></DIV>
<DIV><FONT face=Arial size=2>With regards to transfer, I think there should be
an agreement on standards to exchange profile information between
OP's.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Cheers Mark</FONT></DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=atom@yahoo-inc.com href="mailto:atom@yahoo-inc.com">Allen Tom</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=sites@thirdvisit.co.uk
href="mailto:sites@thirdvisit.co.uk">Mark Cross</A> ;
</DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Wednesday, February 07, 2007 10:18
PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: [OpenID] PR: OpenID.co.uk -
"MobileNumber.OpenID.co.uk" as URI</DIV>
<DIV><BR></DIV>Hi Mark,<BR><BR>It is fine to give people the choice to use
their phone number as their OpenID, however I do believe that it is an OP's
duty and responsibility to inform their users as to why this might not be a
good idea. This applies not only to phone numbers, but also to email and IM
based IDs.<BR><BR>While phone numbers and other personal contact information
are already posted on the net, ]users are usually able to control whether or
not it is displayed, and to whom it displayed to. The new twist with
OpenID is that a someone may signin to an RP using their phone based OpenID,
later regret the decision, and might not have a way to delete or hide their
contact info. <BR><BR>A completely different issue regarding phone based
OpenIDs is that phone numbers are often recycled. Is the OP supposed to
periodically verify that the user still owns the claimed phone number? What
happens if the phone number changes ownership? Is the OP required to hand over
the OpenID to the new owner? If so, is the original owner locked out of all
the sites that where he used his OpenID? <BR><BR>I do believe that the OpenID
community should develop standard guidelines and best practices regarding
OpenIDs and privacy, as well as address the ID recycling issue (as this is not
limited to phone numbers). These questions are bound to come up if mass
adoption is ever seriously considered, and it would be beneficial to the
entire community if we have consensus on the the answers before the lawyers
come asking.<BR><BR>Allen<BR><BR><BR>Mark Cross wrote:
<BLOCKQUOTE cite=mid00d701c74b00$2adb8060$9700000a@mark type="cite"><PRE wrap="">Dear Allen,
I agree with nearly all your arguements here and perhaps I need to think on
but:
- Nobody is forcing you to use your mobile - it's your choice (& just my
idea)
- We have phone numbers on net anyway, so what's the difference from a
harvesting POV?
Thank you for your feedback,
Mark
----- Original Message -----
From: "Allen Tom" <A class=moz-txt-link-rfc2396E href="mailto:atom@yahoo-inc.com"><atom@yahoo-inc.com></A>
To: "Chris Messina" <A class=moz-txt-link-rfc2396E href="mailto:chris.messina@gmail.com"><chris.messina@gmail.com></A>; <A class=moz-txt-link-rfc2396E href="mailto:sites@thirdvisit.co.uk"><sites@thirdvisit.co.uk></A>;
<A class=moz-txt-link-rfc2396E href="mailto:general@openid.net"><general@openid.net></A>
Sent: Wednesday, February 07, 2007 8:47 PM
Subject: Re: [OpenID] PR: OpenID.co.uk - "MobileNumber.OpenID.co.uk" as URI
</PRE>
<BLOCKQUOTE type="cite"><PRE wrap="">I really believe that it is not a good idea to encourage people to use
personal contact infomation as their OpenIDs, which applies to both phone
number and email/IM based IDs. The reason is that spammers and griefers
will make life unbearable for people using these IDs.
The user's OpenID will invariably be displayed at many RPs, and if the
user's contact information could be easily determined by the OpenID, it
would just be a matter of time before OpenID gets a bad rep for attracting
spam, and everyone switches back to disposable IDs again, or abandons
OpenID altogether.
This is the same argument as to why it is not a good idea to post your
email address, IM screenname, or phone number online, especially if its on
some random RP that you're not all that familar with.
For OpenID to succeed, it is very important that the early adopters think
very carefully about these issues, or else OpenID could develop a poor
reputation, preventing its widespread adoption.
Allen
Chris Messina wrote:
</PRE>
<BLOCKQUOTE type="cite"><PRE wrap="">Perhaps the better way to think about this is as a personal OpenID
alias? So rather than publishing it all over the place, an iDP might
offer "phone number aliasing" to help people remember their openids...
So say I sign up on JanRain and add my phone number -- which is
confirmed by SMS or callback code system... Perhaps I could then use
[phonenumber].myopenid.com to login... Just a thought.
Chris
On 2/7/07, Allen Tom <A class=moz-txt-link-rfc2396E href="mailto:atom@yahoo-inc.com"><atom@yahoo-inc.com></A> wrote:
</PRE>
<BLOCKQUOTE type="cite"><PRE wrap="">Hi Mark,
Exposing one's phone number might not be a good idea for everyone, as
griefers and stalkers would have an easy way to harass people who had
phone number based IDs.
Also, what happens if and when a phone number is recycled?
Allen
<A class=moz-txt-link-abbreviated href="mailto:sites@thirdvisit.co.uk">sites@thirdvisit.co.uk</A> wrote:
</PRE>
<BLOCKQUOTE type="cite"><PRE wrap="">Hi,
Shameless plug:
<A class=moz-txt-link-freetext href="http://www.openid.co.uk">http://www.openid.co.uk</A>
Please visit and digg if you like it!
Cheers Mark
_______________________________________________
general mailing list
<A class=moz-txt-link-abbreviated href="mailto:general@openid.net">general@openid.net</A>
<A class=moz-txt-link-freetext href="http://openid.net/mailman/listinfo/general">http://openid.net/mailman/listinfo/general</A>
</PRE></BLOCKQUOTE><PRE wrap="">_______________________________________________
general mailing list
<A class=moz-txt-link-abbreviated href="mailto:general@openid.net">general@openid.net</A>
<A class=moz-txt-link-freetext href="http://openid.net/mailman/listinfo/general">http://openid.net/mailman/listinfo/general</A>
</PRE></BLOCKQUOTE><PRE wrap=""> </PRE></BLOCKQUOTE><PRE wrap=""> </PRE></BLOCKQUOTE><PRE wrap=""><!---->
_______________________________________________
general mailing list
<A class=moz-txt-link-abbreviated href="mailto:general@openid.net">general@openid.net</A>
<A class=moz-txt-link-freetext href="http://openid.net/mailman/listinfo/general">http://openid.net/mailman/listinfo/general</A>
</PRE></BLOCKQUOTE><BR></BLOCKQUOTE></BODY></HTML>