[OpenID] Reuse of expired identities?

Richard Hartmann richih.mailinglist at gmail.com
Sun Aug 12 02:02:29 UTC 2007


Hi all,


my question might be a bit unusual, but it is serious nonetheless.

Suppose there is a OpenID identity. This identity expires and, after
some time, another account of the same name is created.

What happens in this case? Are there are provisions to determine
which account was used to identify for any service? Is any such
mechanism planned?

One obvious fix would be to modify the URI for the account, but that
can possibly introduce new problems.



More information about the general mailing list