Yahoo available AX attrs - backchannel/endpoint URLs
SitG Admin
sysadmin at shadowsinthegarden.com
Wed Dec 9 15:42:48 UTC 2009
>Third, it suggests that whatever metadata the user doesn't provide
>herself, a site author may attempt to harvest elsewhere.
Which is something we need to establish best practices around, to
discourage just that: the *attempt* to harvest correlating (meta)data
elsewhere. Site authors who mix up authentication data and
accidentally commit identity theft on the user's behalf will not be
admired.
-Shade
More information about the specs
mailing list